Vulnerabilities

TI-2021-09852 CVE-2021-28901 · GHSA-xg59-cx23-x6f3

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESS…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00697 Published 2021-09-15 No fix listed CWE-79

TI-2021-09278 CVE-2021-27950 · GHSA-cjhq-3474-22qf

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an…

MEDIUM 41

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01456 Published 2021-07-02 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS…

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an…