TI-2019-09183 CVE-2019-12311 · GHSA-3gjg-87w5-fmgx
Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored…
Priority LOW 29
Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS.
Vulnerabilities
3 records
TI-2019-09175 CVE-2019-12299 · GHSA-p3gx-x4c5-c23m
Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
Priority LOW 29
Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
TI-2019-09157 CVE-2019-12271 · GHSA-37pj-rcr3-gr3m
Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous…
Priority MEDIUM 46
Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side.