Vulnerabilities (CVE)

Filtered by vendor Zucchetti Subscribe
Filtered by product Infobusiness
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-18206 1 Zucchetti 1 Infobusiness 2019-11-05 6.8 MEDIUM 8.8 HIGH
A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.
CVE-2019-18204 1 Zucchetti 1 Infobusiness 2019-11-01 6.5 MEDIUM 8.8 HIGH
Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution.