Sitasoftware

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sitasoftware records in CISA KEV

No Sitasoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Azurcms 2 records MEDIUM

Records

2 records in Azurcms · all components

TI-2021-09278 CVE-2021-27950 · GHSA-cjhq-3474-22qf

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an…

MEDIUM 41

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01456 Published 2021-07-02 No fix listed CWE-89

TI-2021-09852 CVE-2021-28901 · GHSA-xg59-cx23-x6f3

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESS…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00697 Published 2021-09-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0