Regina Kohl, BSc

5 exploits Active since May 2023
CVE-2023-31433 NOMISEC HIGH WRITEUP
Logbuch <8.2.2286, <9.0.2401 - SQL Injection
A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter.
1 stars
CVSS 8.8
CVE-2024-56882 NOMISEC MEDIUM WRITEUP
Sage DPW < 2024_12_000 - Stored Cross-Site Scripting via Kurstitel and Kurzinfo Input Fields
Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with the modified data elements.
CVSS 5.4
CVE-2024-56883 NOMISEC HIGH WRITEUP
Sage DPW <2024_12_001 - Incorrect Access Control
Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the option to do so in the user interface. To do this, a valid request to create a course simply needs to be modified, so that the current user ID in the "id" parameter is replaced with the ID of another user.
CVSS 8.1
CVE-2023-31434 NOMISEC MEDIUM WRITEUP
evasys < 8.2 Build 2286 and 9.x < 9.0 Build 2401 - Authenticated Stored Cross-Site Scripting via User Profile Parameters
The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authenticated attackers to inject HTML Code and XSS payloads in multiple locations.
CVSS 5.4
CVE-2023-31435 NOMISEC HIGH WRITEUP
evasys <8.2.2286 & <9.0.2401 - Info Disclosure
Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allow authenticated attackers to read and write to unauthorized data by accessing functions directly.
CVSS 8.1