Vendors / Intesync Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 3
Exploited now Intesync records in CISA KEV No Intesync vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03332 · Published 2019-12-12 · No fix listed CWE-22
Priority MEDIUM 47
Intesync Solismed 3.3sp allows Insecure File Upload.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02356 · Published 2019-12-12 · No fix listed CWE-434
Priority MEDIUM 47
Intesync Solismed 3.3sp has Incorrect Access Control.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02328 · Published 2019-12-12 · No fix listed CWE-306
Priority MEDIUM 47
Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02725 · Published 2019-12-12 · No fix listed CWE-22
Priority MEDIUM 46
Intesync Solismed 3.3sp has SQL Injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01997 · Published 2019-12-12 · No fix listed CWE-89
Priority MEDIUM 40
Intesync Solismed 3.3sp has CSRF.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00856 · Published 2019-12-12 · No fix listed CWE-352
Priority LOW 35
SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a results action to index.php.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00907 · Published 2010-01-04 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00907 · Published 2009-09-25 · No fix listed CWE-89
Priority LOW 30
Intesync Solismed 3.3sp has XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01308 · Published 2019-12-12 · No fix listed CWE-79
Priority LOW 27
An issue was discovered in Intesync Solismed 3.3sp1.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0065 · Published 2019-12-12 · No fix listed CWE-327
Priority LOW 23
Intesync Solismed 3.3sp allows Clickjacking.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01384 · Published 2019-12-12 · No fix listed CWE-1021
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01178 · Published 2010-01-04 · No fix listed CWE-79
Priority LOW 22
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01178 · Published 2009-09-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
5 3 5 0 0
THREATIST.IORead the docs