r3naissance/nse

r3naissance/nse

Releases0

Stars2

Nmap scripts

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-13968 ↗	Dec 23, 2020Wednesday, 23 December 2020, 18:15	9.8 CRITICAL	7.5 HIGH
CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.
CVE-2020-13969 ↗	Dec 23, 2020Wednesday, 23 December 2020, 18:15	6.1 MEDIUM	4.3 MEDIUM
CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent.
CVE-2017-18195 ↗	Feb 26, 2018Monday, 26 February 2018, 17:29	5.3 MEDIUM	5 MEDIUM
An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments from all blog posts by POSTing requests to /index.php/tools/required/conversations/view_ajax with incremental 'cnvID' integers.