The Echo Group ShareCare 8.15.5
Approved changes feed: RSS · Atom
cpe:2.3:a:echobh:sharecare:8.15.5:*:*:*:*:*:*:*part: a version: 8.15.5 update: *
| Vendor | Echobh (6e8b6d1b-0f38-59b8-b0c6-0af84adc4642) |
|---|---|
| Product | Sharecare (63f4d7d5-a2a1-5d8b-a411-ba9f75bfbe8e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36124 |
vulnerable | 2026-06-08 05:32:49.766069 |
Details available
An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when accessing a subset of sensitive resources, leading to the ability for unauthenticated users to access pages that are vulnerable to attacks such as SQL injection.
Published: 2021-07-13T13:57:33.000Z
Updated: 2024-08-04T00:47:43.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36123 |
vulnerable | 2026-06-08 05:32:49.765618 |
Details available
An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is susceptible to a local file inclusion vulnerability when processing remote input in the textFile parameter from an authenticated user, leading to the ability to read arbitrary files on the server filesystems as well any files accessible via Universal Naming Convention (UNC) paths.
Published: 2021-07-13T13:56:20.000Z
Updated: 2024-08-04T00:47:43.840Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36122 |
vulnerable | 2026-06-08 05:32:49.765312 |
Details available
An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParse_Sup/UnzipFile_Upd.cfm is susceptible to a command argument injection vulnerability when processing remote input in the zippass parameter from an authenticated user, leading to the ability to inject arbitrary arguments to 7z.exe.
Published: 2021-07-13T14:00:51.000Z
Updated: 2024-08-04T00:47:43.802Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36121 |
vulnerable | 2026-06-08 05:32:49.764762 |
Details available
An issue was discovered in Echo ShareCare 8.15.5. The file-upload feature in Access/DownloadFeed_Mnt/FileUpload_Upd.cfm is susceptible to an unrestricted upload vulnerability via the name1 parameter, when processing remote input from an authenticated user, leading to the ability for arbitrary files to be written to arbitrary filesystem locations via ../ Directory Traversal on the Z: drive (a hard-coded drive letter where ShareCare application files reside) and remote code execution as the ShareCare service user (NT AUTHORITY\SYSTEM).
Published: 2021-07-13T13:58:58.000Z
Updated: 2024-08-04T00:47:43.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33578 |
vulnerable | 2026-06-08 05:32:11.827298 |
Details available
Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticated and unauthenticated users, leading to the ability to bypass authentication, exfiltrate Structured Query Language (SQL) records, and manipulate data.
Published: 2021-07-13T13:54:42.000Z
Updated: 2024-08-03T23:50:43.137Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.