CVE-2021-40850

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0780%

EPSS Percentile31.84th

Published2021年12月17日

Last Modified2024年11月21日

Vulnerability Description

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.

📦

Tcman

= 8.0

📦

Tcman

= 11.0

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploita...

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this...

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages con...

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability ...