Maggioli Appalti \& Contratti
5 CVEs affecting Maggioli Appalti \& Contratti. Latest disclosed: 2022-11-21. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44785 | Critical | 9.8 | 2022-11-21 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executa… |
CVE-2022-44784 | High | 8.8 | 2022-11-21 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of services provided by the Axis 1.4 instance, em… |
CVE-2022-44786 | High | 7.5 | 2022-11-21 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to spec… |
CVE-2022-44788 | Medium | 6.5 | 2022-11-21 | An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the serv… |
CVE-2022-44787 | Medium | 6.1 | 2022-11-21 | An issue was discovered in Appalti & Contratti 9.12.2. The web applications are vulnerable to a Reflected Cross-Site Scripting issue. The idPagina parameter is… |