Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-26877

File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .php file upload to the form/efms_exec_html/file_upload_parser.php endpoint.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Softexpert
Products
Excellence Suite
CVE-2023-30330

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.

CVSS 3.1 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Softexpert
Products
Excellence Suite
CVE-2018-12977

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Softexpert
Products
Excellence Suite