4 results (0.010 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-37675

https://notcve.org/view.php?id=CVE-2024-37675

21 Jun 2024 — Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter "sectionContent" related to the functionality of adding notes to an uploaded file. Vulnerabilidad de Cross-Site Scripting en el producto Tessi Docubase Document Management versión 5.x permite a un atacante remoto ejecutar código arbitrario a través del parámetro "sectionContent" relacionado con la funcionalidad de agregar notas a un archivo cargado. • http://docubase.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-37672

https://notcve.org/view.php?id=CVE-2024-37672

21 Jun 2024 — Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter. Una vulnerabilidad de Cross-Site Scripting en el producto Tessi Docubase Document Management 5.x permite a un atacante remoto ejecutar código arbitrario a través del parámetro idactivity. • http://docubase.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-37673

https://notcve.org/view.php?id=CVE-2024-37673

21 Jun 2024 — Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the filename parameter. Vulnerabilidad de Cross-Site Scripting en el producto Tessi Docubase Document Management versión 5.x permite a un atacante remoto ejecutar código arbitrario a través del parámetro de nombre de archivo. • http://docubase.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-37671

https://notcve.org/view.php?id=CVE-2024-37671

21 Jun 2024 — Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter. Vulnerabilidad de Cross-Site Scripting en el producto Tessi Docubase Document Management 5.x permite a un atacante remoto ejecutar código arbitrario a través del parámetro de página. • http://docubase.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •