← Back

Overit

overit

6 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Geocall
geocall

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Overit
1Geocall
Nov 21, 2024
Mar 10, 2022
N/A· v4
6.5 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem.
1Overit
1Geocall
Nov 21, 2024
Mar 10, 2022
N/A· v4
8.8 HIGH· v3
6.0 MEDIUM· v2
An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achi...Show more
An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution.Show less
1Overit
1Geocall
Nov 21, 2024
Apr 1, 2019
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application.
1Overit
1Geocall
Nov 21, 2024
Apr 1, 2019
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative...Show more
An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions.Show less
1Overit
1Geocall
Nov 21, 2024
Apr 1, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.
1Overit
1Geocall
Nov 21, 2024
Apr 1, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.