Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2023-34838
Disclosure Date: June 27, 2023 (last updated October 08, 2023)
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter.
0
Attacker Value
Unknown
CVE-2023-34837
Disclosure Date: June 27, 2023 (last updated October 08, 2023)
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath.
0
Attacker Value
Unknown
CVE-2023-34836
Disclosure Date: June 27, 2023 (last updated October 08, 2023)
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters.
0
Attacker Value
Unknown
CVE-2023-34835
Disclosure Date: June 27, 2023 (last updated October 08, 2023)
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete_file parameter.
0
Attacker Value
Unknown
CVE-2023-33731
Disclosure Date: June 02, 2023 (last updated October 08, 2023)
Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the URL directly.
0
Attacker Value
Unknown
CVE-2023-33732
Disclosure Date: May 31, 2023 (last updated October 08, 2023)
Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.
0
Attacker Value
Unknown
CVE-2023-33730
Disclosure Date: May 31, 2023 (last updated October 08, 2023)
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.
0
Attacker Value
Unknown
CVE-2023-31703
Disclosure Date: May 17, 2023 (last updated October 08, 2023)
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.
0
Attacker Value
Unknown
CVE-2023-31702
Disclosure Date: May 17, 2023 (last updated October 08, 2023)
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.
0
