CVE-2021-45228
Published Apr 14, 2022An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious Jav…
Vendor/product archive
coins-global / coins_construction_cloud CVEs
Beta · best-effort7 CVEs tagged to coins-global / coins_construction_cloud — 0 Critical, 1 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2021-45227
Published Apr 14, 2022An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-S…
CVE-2021-45226
Published Jan 24, 2022An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointi…
CVE-2021-45225
Published Jan 24, 2022An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scripting (XSS) via malicious links (affe…
CVE-2021-45224
Published Jan 24, 2022An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a URL parameter. Attackers can trivially a…
CVE-2021-45223
Published Jan 24, 2022An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service attacks via forced server crashes.
CVE-2021-45222
Published Jan 24, 2022An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by HR personnel.
Showing 1-7 of 7 CVEsPage 1 of 1