Intesync - vulnerabilities (CVEs)
13 CVEs in 2 products, 0 in the last 30 days, newest from 2019-12-12.
Products
Newest CVEs of Intesync
- CVE-2019-17428 - CVSS 5.9 (medium), 2019-12-12: An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the…
- CVE-2019-16246 - CVSS 9.8 (critical), 2019-12-12: Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution.
- CVE-2019-15932 - CVSS 9.8 (critical), 2019-12-12: Intesync Solismed 3.3sp has Incorrect Access Control.
- CVE-2019-15935 - CVSS 6.1 (medium), 2019-12-12: Intesync Solismed 3.3sp has XSS.
- CVE-2019-15931 - CVSS 9.8 (critical), 2019-12-12: Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
- CVE-2019-15934 - CVSS 8.8 (high), 2019-12-12: Intesync Solismed 3.3sp has CSRF.
- CVE-2019-15930 - CVSS 4.3 (medium), 2019-12-12: Intesync Solismed 3.3sp allows Clickjacking.
- CVE-2019-15933 - CVSS 9.8 (critical), 2019-12-12: Intesync Solismed 3.3sp has SQL Injection.
- CVE-2019-15936 - CVSS 9.8 (critical), 2019-12-12: Intesync Solismed 3.3sp allows Insecure File Upload.
- CVE-2009-4552 - CVSS 4.3 (medium), 2010-01-04: Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2009-4551 - CVSS 7.5 (high), 2010-01-04: SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter…
- CVE-2009-3420 - CVSS 4.3 (medium), 2009-09-25: Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script…
- CVE-2009-3419 - CVSS 7.5 (high), 2009-09-25: SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the…
