TI-2023-03799 CVE-2023-4103 · GHSA-xwr3-6hhp-5cch
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
QSige statistics are affected by a remote SQLi vulnerability.
Vulnerabilities
7 records
TI-2023-03798 CVE-2023-4102 · GHSA-3frv-mxwj-89pr
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so.
TI-2023-03797 CVE-2023-4101 · GHSA-2f7q-533q-p67m
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so.
TI-2023-03796 CVE-2023-4100 · GHSA-wq2h-7v4w-5qc7
Multiple vulnerabilities in IDM Sistemas QSige
Priority LOW 36
Allows an attacker to perform XSS attacks stored on certain resources.
TI-2023-03795 CVE-2023-4099 · GHSA-9r3h-r6g3-69f5
Multiple vulnerabilities in IDM Sistemas QSige
Priority LOW 33
The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so.
TI-2023-03794 CVE-2023-4098 · GHSA-9932-r54r-4q8x
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure.
TI-2023-03793 CVE-2023-4097 · GHSA-8mx5-wvh2-fvmf
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
The file upload functionality is not implemented correctly and allows uploading of any type of file.