Skip to main content

Appalti Contratti

5 CVEs product

Monthly

CVE-2022-44788 Nov 21, 23:15 MEDIUM POC This Month

An issue was discovered in Appalti & Contratti 9.12.2. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Session Fixation Appalti Contratti Maggioli
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-44787 Nov 21, 23:15 MEDIUM POC This Month

An issue was discovered in Appalti & Contratti 9.12.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Appalti Contratti Maggioli
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2022-44786 Nov 21, 23:15 HIGH POC This Week

An issue was discovered in Appalti & Contratti 9.12.2. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure LFI Appalti Contratti Maggioli
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2022-44785 Nov 21, 23:15 CRITICAL POC Act Now

An issue was discovered in Appalti & Contratti 9.12.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Appalti Contratti Maggioli
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-44784 Nov 21, 23:15 HIGH POC This Week

An issue was discovered in Appalti & Contratti 9.12.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Apache SSRF Appalti Contratti Maggioli
NVD
CVSS 3.1
8.8
EPSS
1.0%
EPSS 1% CVSS 6.5
MEDIUM POC This Month

An issue was discovered in Appalti & Contratti 9.12.2. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Session Fixation Appalti Contratti +1
NVD
EPSS 0% CVSS 6.1
MEDIUM POC This Month

An issue was discovered in Appalti & Contratti 9.12.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Appalti Contratti Maggioli
NVD
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue was discovered in Appalti & Contratti 9.12.2. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure LFI +2
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

An issue was discovered in Appalti & Contratti 9.12.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Appalti Contratti Maggioli
NVD
EPSS 1% CVSS 8.8
HIGH POC This Week

An issue was discovered in Appalti & Contratti 9.12.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Apache SSRF +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy