Vulnerabilities

TI-2019-09783 CVE-2019-13066 · GHSA-4279-qvh5-v435

Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many…

LOW 29

Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, by updating a script's Script Name, Suite Name, Base URL, Android, iOS, Scripts R…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00999 Published 2019-10-29 No fix listed CWE-79

TI-2019-09782 CVE-2019-13063 · GHSA-q582-wgr3-m4j7

Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim…

MEDIUM 55

Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.2723 Published 2019-09-23 No fix listed CWE-22

TI-2019-11274 CVE-2019-15102 · GHSA-7x4w-h4rw-ph2c

An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0.

MEDIUM 49

An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03852 Published 2019-09-06 No fix listed CWE-306

TI-2019-10218 CVE-2019-13597 · GHSA-33hg-679x-g4vw

_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution.

MEDIUM 57

_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.14349 Published 2019-07-14 No fix listed CWE-78

TI-2018-14509 CVE-2018-20468 · GHSA-w4wv-3mp2-54f6

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

MEDIUM 42

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02223 Published 2019-06-17 No fix listed CWE-1236

TI-2018-14510 CVE-2018-20469 · GHSA-gp44-m8rj-664r

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

MEDIUM 60

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18539 Published 2019-06-17 No fix listed CWE-89

TI-2018-14511 CVE-2018-20470 · GHSA-hpvw-59r6-c925

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

MEDIUM 63

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.4606 Published 2019-06-17 No fix listed CWE-22

TI-2018-14512 CVE-2018-20472 · GHSA-whm9-838m-6qww

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

LOW 28

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02044 Published 2019-06-17 No fix listed CWE-79

Vulnerabilities

Filters