Cláudio André

باحث منINTEGRITY S.A.
#21850من 60,574
14.3إجمالي CVSS
الثغرات · 2
متوسطة
1
عالية
1
PT-2020-7608
2020-03-09
10
CVE-2014-1634
Magento
Advanced Newsletter Magento Extension
The issue exists due to SQL Injection in the Advanced Newsletter Magento extension. This can be exploited via the "/store/advancednewsletter/index/subscribeajax/an category id/" PATH INFO.
PT-2017-5935
2017-08-28
4.3
CVE-2014-4925
Good Technology
Good For Enterprise For Android
Name of the Vulnerable Software and Affected Versions: Good for Enterprise for Android version 1.9.0.40 Good for Enterprise for Android version 2.8.0.398 Description: The issue is related to a cross-site scripting (XSS) vulnerability. Recommendations: For Good for Enterprise for Android version 1.9.0.40, update to a version that includes a fix for this issue. For Good for Enterprise for Android version 2.8.0.398, update to a version that includes a fix for this issue.