Auieo

9 CVEs across 1 Auieo products. Browse Auieo vulnerabilities, severities, and proof-of-concept exploits.

Auieo products with known CVEs

ProductCVEs
Candidats9
Auieo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-42749Medium6.12022-11-03CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the…
CVE-2022-42748Medium6.12022-11-03CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible bec…
CVE-2022-42747Medium6.12022-11-03CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because th…
CVE-2022-42746Medium6.12022-11-03CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because…
CVE-2022-42744Critical9.82022-11-03CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not…
CVE-2022-42751High8.82022-11-03CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This…
CVE-2022-42750High8.82022-11-03CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validat…
CVE-2022-25228Medium6.52022-08-18CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in '/index.php?m=…
CVE-2020-9341High8.82020-02-22CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.