TI-2021-12217 CVE-2021-32543 · GHSA-jpr6-p297-4w5g
SysJust CTS Web - Broken Authentication
Priority LOW 30
The CTS Web transaction system related to authentication management is implemented incorrectly.
Vulnerabilities
6 records
TI-2021-12216 CVE-2021-32542 · GHSA-f5hm-hjxq-fhw3
SysJust CTS Web - Reflected XSS
Priority LOW 28
The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token th…
TI-2021-12215 CVE-2021-32541 · GHSA-549f-vmr8-2vjf
SysJust CTS Web - Broken Access Control
Priority LOW 27
The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged…
TI-2020-03439 CVE-2020-3939 · GHSA-w63w-793r-vxg5
SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)
Priority LOW 28
SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site Scripting(XSS), personal information may be leaked to attackers via the vulnerability.
TI-2020-03438 CVE-2020-3938 · GHSA-2ff4-qhx5-wwhw
SysJust Syuan-Gu-Da-Shih -Request-Forgery
Priority MEDIUM 45
SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests.
TI-2020-03437 CVE-2020-3937 · GHSA-v4ff-5p6c-h76r
SysJust Syuan-Gu-Da-Shih-SQL injection
Priority LOW 38
SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database.