Sahipro Sahi Pro
8 CVEs affecting Sahipro Sahi Pro. Latest disclosed: 2019-10-29. Critical: 3, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15102 | Critical | 9.8 | 2019-09-06 | An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) does not have any authentication mechanism… |
CVE-2019-13597 | Critical | 9.8 | 2019-07-14 | _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a… |
CVE-2018-20469 | Critical | 9.8 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploite… |
CVE-2018-20468 | High | 8.8 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An… |
CVE-2019-13063 | High | 7.5 | 2019-09-23 | Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page… |
CVE-2018-20470 | High | 7.5 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module… |
CVE-2019-13066 | Medium | 6.1 | 2019-10-29 | Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, by updating a script… |
CVE-2018-20472 | Medium | 5.4 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS. |