Francesco Mercatili

#6301of 60,596
49.8Total CVSS
Vulnerabilities · 6
Medium
2
High
2
Critical
2
PT-2023-28014
2023-08-31
6.5
CVE-2023-41635
Grupposcai
Grupposcai Realgimm
A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component allows attackers to read any file in the filesystem via supplying a crafted XML file.
PT-2023-28015
2023-08-31
9.8
CVE-2023-41636
Grupposcai
Realgimm
A SQL injection issue in the `Data Richiesta dal` parameter allows attackers to access the database and execute arbitrary commands via a crafted SQL query.
PT-2023-28016
2023-08-31
9.8
CVE-2023-41637
Grupposcai
Realgimm
The issue allows attackers to execute arbitrary code via uploading a crafted HTML file, exploiting an arbitrary file upload vulnerability in the Carica immagine function.
PT-2023-28017
2023-08-31
8.8
CVE-2023-41638
Grupposcai
Grupposcai Realgimm
The issue is related to an arbitrary file upload vulnerability in the Gestione Documentale module, which allows attackers to execute arbitrary code by uploading a crafted file.
PT-2023-28018
2023-08-31
8.8
CVE-2023-41640
Grupposcai
Realgimm
An improper error handling issue in the ErroreNonGestito.aspx component allows attackers to obtain sensitive technical information via a crafted SQL query.
PT-2023-28019
2023-08-31
6.1
CVE-2023-41642
Grupposcai
Grupposcai Realgimm
Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the `VIEWSTATE` parameter.