Search vulnerabilities

Results 4

Export CSV
CVE-2022-34094

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2022-34093

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.php.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2022-34092

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via svg2img.php.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-32409

A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.

CVSS 3.1 · 9.8 Critical EPSS 13.6% KEV · Not listed
Vendors
Products