Approved changes feed: RSS · Atom

cpe:2.3:a:arxes-tolina:arxes-tolina:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorArxes Tolina (b812920c-f320-592a-9fdd-f8b45cc7bf9a)
ProductArxes Tolina (295b6593-b83f-55da-958a-270968848416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19677 vulnerable 2026-06-08 05:13:23.240580 Details available
arxes-tolina 3.0.0 allows User Enumeration.
Published: 2020-03-18T22:27:14.000Z
Updated: 2024-08-05T02:25:12.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19676 vulnerable 2026-06-08 05:13:23.239989 Details available
A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.
Published: 2020-03-18T21:55:53.000Z
Updated: 2024-08-05T02:25:12.049Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.