Quiter Gateway (Java WAR on Apache Tomcat) vulnerabilities
8 known vulnerabilities in Quiter Gateway (Java WAR on Apache Tomcat) from Quiter. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Quiter Gateway (Java WAR on Apache Tomcat): Generation of Error Message Containing Sensitive Information
Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /<Client>FacturaE/listado_facturas_ficha.jsp.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/<Client>FacturaE/BusquedasFacturasSesion.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura.
- 9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.