Grupposcai vulnerabilities
We track 4 vulnerabilities in Grupposcai products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2023.
Latest Grupposcai vulnerabilities
- 8.8 High severity
Realgimm: Improper Neutralization of Special Elements used in an SQL Command
An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query.
- 8.8 High severity
Realgimm: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file.
- 9.8 Critical severity
Realgimm: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.
- 9.8 Critical severity
Realgimm: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query.