Search
Search Results (24 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-40852 | 1 Tcman | 1 Gim | 2024-09-16 | 6.1 Medium |
| TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information. | ||||
| CVE-2021-40850 | 1 Tcman | 1 Gim | 2024-09-16 | 10 Critical |
| TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx. | ||||
| CVE-2022-36276 | 1 Tcman | 1 Gim | 2024-09-05 | 9.9 Critical |
| TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database. | ||||
| CVE-2022-36277 | 1 Tcman | 1 Gim | 2024-09-05 | 6.5 Medium |
| The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks. | ||||