CVE-2021-45225

Mô tả

Tham khảo

• appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud · Patch
• syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-052.txt · Exploit
• syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 · Third Party Advisory

Lỗ hổng khác của coins construction cloud

• CVE-2021-45228TRUNG BÌNH 5.4An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task…
• CVE-2021-45227TRUNG BÌNH 5.4An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionalit…
• CVE-2021-45226TRUNG BÌNH 6.5An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause i…
• CVE-2021-45224TRUNG BÌNH 6.1An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a U…
• CVE-2021-45223TRUNG BÌNH 6.5An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service a…