Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2019-15746 SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute sy… Sitos Six Mitigation only Fix from $2,3002019-10-07 CRITICAL 9.8 CVE-2019-15748 SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticate… Sitos Six Mitigation only Fix from $2,3002019-10-07 CRITICAL 9.8 CVE-2019-15751 An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitrary code by uploading a SCORM file with … Sitos Six Mitigation only Fix from $2,3002019-10-07 HIGH 8.8 CVE-2019-15747 SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to in… Sitos Six Mitigation only Fix from $1,9502019-10-07 MEDIUM 6.5 CVE-2019-15749 SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old … Sitos Six Mitigation only Fix from $1,6002019-10-07 MEDIUM 6.1 CVE-2019-15750 A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or H… Sitos Six Mitigation only Fix from $1,6002019-10-07