Techvill

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Techvill records in CISA KEV

No Techvill vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-17305 CVE-2022-37137 · GHSA-43gg-3jq2-xwfh

MEDIUM 58

PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2022-09-14 No fix listed CWE-79

TI-2022-17308 CVE-2022-37140 · GHSA-v78j-fp7j-4hfj

LOW 38

PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE).

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01751 Published 2022-09-14 No fix listed CWE-434

TI-2022-15745 CVE-2022-34991 · GHSA-vr8p-pf4j-6wrh

LOW 25

Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2022-07-26 No fix listed CWE-79