Intesync

13 CVEs across 2 Intesync products. Browse Intesync vulnerabilities, severities, and proof-of-concept exploits.

Intesync products with known CVEs

ProductCVEs
Solismed9
Miniweb4
Intesync CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-17428Medium5.92019-12-12An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the databas…
CVE-2019-16246Critical9.82019-12-12Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution.
CVE-2019-15936Critical9.82019-12-12Intesync Solismed 3.3sp allows Insecure File Upload.
CVE-2019-15935Medium6.12019-12-12Intesync Solismed 3.3sp has XSS.
CVE-2019-15934High8.82019-12-12Intesync Solismed 3.3sp has CSRF.
CVE-2019-15933Critical9.82019-12-12Intesync Solismed 3.3sp has SQL Injection.
CVE-2019-15932Critical9.82019-12-12Intesync Solismed 3.3sp has Incorrect Access Control.
CVE-2019-15931Critical9.82019-12-12Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
CVE-2019-15930Medium4.32019-12-12Intesync Solismed 3.3sp allows Clickjacking.
CVE-2009-45522010-01-04Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_I…
CVE-2009-45512010-01-04SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in…
CVE-2009-34202009-09-25Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script…
CVE-2009-34192009-09-25SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth…