Filtered by vendor Plixer Subscriptions
Filtered by product Scrutinizer Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-41262 1 Plixer 1 Scrutinizer 2024-09-18 9.8 Critical
An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server.
CVE-2023-41263 1 Plixer 1 Scrutinizer 2024-09-18 3.7 Low
An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information.
CVE-2023-41261 1 Plixer 1 Scrutinizer 2024-09-18 5.3 Medium
An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results.
CVE-2021-28993 1 Plixer 1 Scrutinizer 2024-08-03 7.5 High
Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information (remote).