IDM Sistemas QSige vulnerabilities
We track 4 vulnerabilities in IDM Sistemas QSige products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2023.
Latest IDM Sistemas QSige vulnerabilities
- 8.8 High severity
QSige: Improper Neutralization of Special Elements used in an SQL Command
QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the
- 8.8 High severity
QSige: Improper Neutralization of Special Elements used in an SQL Command
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
- 8.2 High severity
QSige: Improper Neutralization of Input During Web Page Generation
Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions.
- 8.8 High severity
QSige: Unrestricted Upload of File with Dangerous Type
The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.