Grupposcai Realgimm
6 CVEs affecting Grupposcai Realgimm. Latest disclosed: 2023-08-31. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-41637 | Critical | 9.8 | 2023-08-31 | An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploadin… |
CVE-2023-41636 | Critical | 9.8 | 2023-08-31 | A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitra… |
CVE-2023-41640 | High | 8.8 | 2023-08-31 | An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical… |
CVE-2023-41638 | High | 8.8 | 2023-08-31 | An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploa… |
CVE-2023-41635 | Medium | 6.5 | 2023-08-31 | A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the… |
CVE-2023-41642 | Medium | 6.1 | 2023-08-31 | Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execut… |