Solucoescoop
Monthly
Path traversal in iSoluçõesWEB up to 20250516 allows authenticated attackers to read arbitrary files via the nomeArquivo parameter in /sys/up.upload.php. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.17%), indicating limited exploitation likelihood.
Stored cross-site scripting in iSoluçõesWEB up to 20250519 allows an authenticated attacker with low privileges to inject malicious scripts via the 'Descrição da solicitação' parameter in the /fluxos-dashboard endpoint. Public exploit code exists, but no active exploitation has been reported and EPSS score is low (0.06%).
Path traversal in iSoluçõesWEB up to 20250516 allows authenticated attackers to read arbitrary files via the nomeArquivo parameter in /sys/up.upload.php. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.17%), indicating limited exploitation likelihood.
Stored cross-site scripting in iSoluçõesWEB up to 20250519 allows an authenticated attacker with low privileges to inject malicious scripts via the 'Descrição da solicitação' parameter in the /fluxos-dashboard endpoint. Public exploit code exists, but no active exploitation has been reported and EPSS score is low (0.06%).