Skip to content
OpenAdvisories

Vendor

Profelis IT Consultancy

2 known vulnerabilities.

Products

SambaBox 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.8
    CVE-2022-25619

    Authenticated Command Injection to RCE

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 …

    Profelis IT Consultancy SambaBox
  • Low 3.8
    CVE-2022-25620

    Stored Cross-Site Scripting (XSS)

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Pro…

    Profelis IT Consultancy SambaBox