Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tylertech court case management plus - vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3
CVE-2023-6343
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated malicious user to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated version of Aquafo...
Tylertech Court Case Management Plus -
9.8
CVSSv3
CVE-2023-6342
Tyler Technologies Court Case Management Plus allows a remote malicious user to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for prin...
Tylertech Court Case Management Plus -
5.3
CVSSv3
CVE-2023-6344
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated malicious user to enumerate directories using the tiffserver/te003.aspx or te004.aspx 'ifolder' parameter. This behavior is related to the use of a deprecated version of Aquaforest TIFF Serve...
Tylertech Court Case Management Plus -
9.4
CVSSv3
CVE-2023-6353
Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote malicious user to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.
Tylertech Court Case Management Plus -
9.4
CVSSv3
CVE-2023-6354
Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote malicious user to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter.
Tylertech Court Case Management Plus -
7.5
CVSSv3
CVE-2023-6375
Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthenticated attacker. Backups may contain sensitive information such as database credentials.
Tylertech Court Case Management Plus -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook