24 July 2023

57 results · Feed

• High 7.2
  CVE-2023-38056

  Code execution via System Configuration

  Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X b…

  OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  Jul 24, 2023
• Low 3.1
  CVE-2023-3862

  Travelmate Travelable Trek Management Solution Comment Box cross site scripting

  A vulnerability was found in Travelmate Travelable Trek Management Solution 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Box Handler. The manipulation of the argument comment leads to cro…

  Travelmate Travelable Trek Management Solution
  Jul 24, 2023
• Low 3.5
  CVE-2023-3861

  phpscriptpoint Insurance search.php cross site scripting

  A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation leads to cross site scripting. The attack can be launched remo…

  phpscriptpoint Insurance
  Jul 24, 2023
• Low 3.5
  CVE-2023-3860

  phpscriptpoint Insurance page.php cross site scripting

  A vulnerability was found in phpscriptpoint Insurance 1.2. It has been classified as problematic. Affected is an unknown function of the file /page.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifi…

  phpscriptpoint Insurance
  Jul 24, 2023
• Medium 6.3
  CVE-2023-3859

  phpscriptpoint Car Listing GET Parameter search.php sql injection

  A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown processing of the file /search.php of the component GET Parameter Handler. The manipulation of the argument brand_id/model_id/car_condition…

  phpscriptpoint Car Listing
  Jul 24, 2023
• Low 3.5
  CVE-2023-3858

  phpscriptpoint Car Listing search.php cross site scripting

  A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can …

  phpscriptpoint Car Listing
  Jul 24, 2023
• Low 3.5
  CVE-2023-3857

  phpscriptpoint Ecommerce product.php cross site scripting

  A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack r…

  phpscriptpoint Ecommerce
  Jul 24, 2023
• Low 3.5
  CVE-2023-3856

  phpscriptpoint Ecommerce blog-single.php cross site scripting

  A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of the file /blog-single.php. The manipulation of the argument slug leads to cross site scripting. The …

  phpscriptpoint Ecommerce
  Jul 24, 2023
• Unscored —
  CVE-2023-37613

  A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary …

  Jul 24, 2023
• Unscored —
  CVE-2023-26077

  Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.

  Jul 24, 2023
• Unscored —
  CVE-2023-26078

  Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of pri…

  Jul 24, 2023
• Unscored —
  CVE-2022-28865

  An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can ch…

  Jul 24, 2023
• Unscored —
  CVE-2022-28863

  An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configurati…

  Jul 24, 2023
• Unscored —
  CVE-2022-28867

  An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user…

  Jul 24, 2023
• Unscored —
  CVE-2022-28864

  An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user…

  Jul 24, 2023
• Unscored —
  CVE-2022-30280

  /SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with …

  Jul 24, 2023
• Unscored —
  CVE-2021-39421

  A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML…

  Jul 24, 2023