Cipsoft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cipsoft records in CISA KEV

No Cipsoft vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2019-11674 CVE-2019-15574 · GHSA-grmv-p9vf-x5xx

MEDIUM 45

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2019-08-26 No fix listed CWE-89

TI-2019-11673 CVE-2019-15573 · GHSA-m377-xp67-f8vv

MEDIUM 45

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2019-08-26 No fix listed CWE-89

TI-2019-11672 CVE-2019-15572 · GHSA-65jc-f2w3-r364

MEDIUM 45

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2019-08-26 No fix listed CWE-89