Approved changes feed: RSS · Atom

cpe:2.3:a:grupposcai:realgimm:1.1.37:p38:*:*:*:*:*:*

part: a version: 1.1.37 update: p38

VendorGrupposcai (a4d7f297-df19-5b31-b79b-9cb384936060)
ProductRealgimm (038bd654-e227-5878-801f-25449d5e180c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41642 vulnerable 2026-06-08 06:11:06.286324 Details available
Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.
Published: 2023-08-31T00:00:00.000Z
Updated: 2024-10-01T18:07:34.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41640 vulnerable 2026-06-08 06:11:06.285862 Details available
An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query.
Published: 2023-08-31T00:00:00.000Z
Updated: 2024-10-01T17:04:27.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41638 vulnerable 2026-06-08 06:11:06.285187 Details available
An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file.
Published: 2023-08-31T00:00:00.000Z
Updated: 2024-10-01T17:04:58.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41637 vulnerable 2026-06-08 06:11:06.284528 Details available
An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.
Published: 2023-08-31T00:00:00.000Z
Updated: 2024-10-01T17:05:31.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41636 vulnerable 2026-06-08 06:11:06.283999 Details available
A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query.
Published: 2023-08-31T00:00:00.000Z
Updated: 2024-10-01T18:08:27.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41635 vulnerable 2026-06-08 06:11:06.283223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.