Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-40852 1 Tcman 1 Gim 2024-09-16 6.1 Medium
TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information.
CVE-2021-40850 1 Tcman 1 Gim 2024-09-16 10 Critical
TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.
CVE-2022-36276 1 Tcman 1 Gim 2024-09-05 9.9 Critical
TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.
CVE-2022-36277 1 Tcman 1 Gim 2024-09-05 6.5 Medium
The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.