Cipsoft

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-15574 Aug 26, 15:15 CRITICAL PATCH Act Now

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP SQLi Gesior Aac Cipsoft

NVD GitHub

CVSS 3.0

9.8

EPSS

1.4%

CVE-2019-15573 Aug 26, 15:15 CRITICAL PATCH Act Now

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP SQLi Gesior Aac Cipsoft

NVD GitHub

CVSS 3.0

9.8

EPSS

1.4%

CVE-2019-15572 Aug 26, 15:15 CRITICAL PATCH Act Now

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP SQLi Gesior Aac Cipsoft

NVD GitHub

CVSS 3.0

9.8

EPSS

1.4%

CVE-2019-15574

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

PHP SQLi Gesior Aac +1

NVD GitHub

CVE-2019-15573

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP SQLi Gesior Aac +1

NVD GitHub

CVE-2019-15572

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

PHP SQLi Gesior Aac +1

NVD GitHub