← Back

I3geo

i3geo

Vendor: Softwarepublico • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-34094
1Softwarepublico
1I3geo
Jun 17, 2026
Jul 14, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.
CVE-2022-34093
1Softwarepublico
1I3geo
Jun 17, 2026
Jul 14, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.php.
CVE-2022-34092
1Softwarepublico
1I3geo
Jun 17, 2026
Jul 14, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via svg2img.php.
CVE-2022-32409
1Softwarepublico
1I3geo
Jun 17, 2026
Jul 14, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.