Vulnerabilities

TI-2023-14097 CVE-2023-29983 · GHSA-69qg-2jfp-r37q

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote…

LOW 32

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.05097 Published 2023-05-12 No fix listed CWE-79

TI-2023-14029 CVE-2023-29809 · GHSA-hjxf-v396-v3fq

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a…

HIGH 82

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10514 Published 2023-05-12 No fix listed CWE-89

TI-2023-14028 CVE-2023-29808 · GHSA-7x76-4ppr-qfh2

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code.

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0137 Published 2023-05-12 No fix listed CWE-79

Vulnerabilities

Filters

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote…

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a…

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code.