Arxes Tolina

arxes-tolina

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Arxes Tolina

arxes-tolina

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-19677 1Arxes Tolina 1Arxes Tolina Jun 17, 2026 Mar 18, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 arxes-tolina 3.0.0 allows User Enumeration.
CVE-2019-19676 1Arxes Tolina 1Arxes Tolina Jun 17, 2026 Mar 18, 2020 N/A· v4 9.6 CRITICAL· v3 9.3 HIGH· v2 A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, a...Show more A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2019-19677

1Arxes Tolina

Jun 17, 2026

Mar 18, 2020

N/A· v4

4.3 MEDIUM· v3

4.0 MEDIUM· v2

arxes-tolina 3.0.0 allows User Enumeration.

CVE-2019-19676

1Arxes Tolina

Jun 17, 2026

Mar 18, 2020

N/A· v4

9.6 CRITICAL· v3

9.3 HIGH· v2

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.Show less