MidnightBSD

Advisories for cipsoft

CVE-2019-15572 HIGH

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor Product Version
cipsoft gesior-aac *
CVE-2019-15573 HIGH

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor Product Version
cipsoft gesior-aac *
CVE-2019-15574 HIGH

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor Product Version
cipsoft gesior-aac *