RSS   Vulnerabilities for 'Registro elettronico'   RSS

2022-06-09
 
CVE-2019-25068

CWE-269
 
 
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely.

 
 
CVE-2019-25069

CWE-200
 
 
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure (ASP.NET). The attack may be initiated remotely.

 
2019-02-10
 
CVE-2019-7693

CWE-79
 
 
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation.

 
2018-10-23
 
CVE-2018-18437

CWE-79
 
 
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter.

 

Copyright 2024, cxsecurity.com

 

Back to Top