Skip to main content

Companymaps

3 CVEs product

Monthly

CVE-2023-29983 May 12, 11:15 MEDIUM POC This Month

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Companymaps Companymaps Project
NVD GitHub Exploit-DB
CVSS 3.1
5.4
EPSS
5.1%
CVE-2023-29809 May 12, 01:15 CRITICAL POC THREAT Act Now

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE SQLi Companymaps Companymaps Project
NVD GitHub Exploit-DB
CVSS 3.1
9.8
EPSS
10.5%
CVE-2023-29808 May 12, 01:15 MEDIUM POC This Month

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Companymaps Companymaps Project
NVD GitHub
CVSS 3.1
6.1
EPSS
1.4%
EPSS 5% CVSS 5.4
MEDIUM POC This Month

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Companymaps +1
NVD GitHub Exploit-DB
EPSS 11% CVSS 9.8
CRITICAL POC THREAT Act Now

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE SQLi Companymaps +1
NVD GitHub Exploit-DB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Companymaps +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy