CVE-2022-44788
Published Nov 21, 2022An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first visi…
Vendor archive
maggioli CVEs
Beta · best-effort5 CVEs tagged to vendor maggioli — 1 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2022-44787
Published Nov 21, 2022An issue was discovered in Appalti & Contratti 9.12.2. The web applications are vulnerable to a Reflected Cross-Site Scripting issue. The idPagina parameter is reflected inside th…
CVE-2022-44786
Published Nov 21, 2022An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to…
CVE-2022-44785
Published Nov 21, 2022An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthen…
CVE-2022-44784
Published Nov 21, 2022An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of services provided by the Axis 1.4 instance, embedded directly into…
Showing 1-5 of 5 CVEsPage 1 of 1