Search vulnerabilities

Results 3

Export CSV
CVE-2024-6401

SQLi in SFS Consulting's InsureE GL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
CVE-2024-7098

XML Injection in SFS Consulting's ww.Winsure

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Products
CVE-2024-7104

Remote Code Execution in SFS Consulting's ww.Winsure

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Products