Vendors / Economizzer Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Economizzer records in CISA KEV No Economizzer vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A SQL injection vulnerability exists in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01031 · Published 2023-09-28 · No fix listed CWE-89
Priority HIGH 73
A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023).
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0107 · Published 2023-09-28 · No fix listed CWE-94
Priority MEDIUM 63
The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00795 · Published 2023-09-28 · No fix listed CWE-203
Priority MEDIUM 62
A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023).
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.31569 · Published 2023-09-28 · No fix listed CWE-434
Priority MEDIUM 62
The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00777 · Published 2023-09-28 · No fix listed CWE-1021
Priority MEDIUM 51
An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker to access cash book entry attachments of any other user, if t…
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00748 · Published 2023-09-28 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
1 2 2 1 0
THREATIST.IORead the docs