Northstar Technologies Northstar Club Management 6.3
Approved changes feed: RSS · Atom
cpe:2.3:a:globalnorthstar:northstar_club_management:6.3:*:*:*:*:*:*:*part: a version: 6.3 update: *
| Vendor | Globalnorthstar (ea823039-8a00-58bd-bef2-81cf3b733559) |
|---|---|
| Product | Northstar Club Management (5dc2b6c2-6544-58a1-97e4-73f6268643f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-26959 |
vulnerable | 2026-06-08 05:41:54.697074 |
Details available
CRITICAL (10)
There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp page in the /northstar/iphone/ directory. Exploitation of the SQL injection vulnerabilities allows full access to the database which contains critical data for organization’s that make full use of the software suite.
Published: 2022-09-16T01:51:08.000Z
Updated: 2024-08-03T05:18:38.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29398 |
vulnerable | 2026-06-08 05:31:26.151486 |
Details available
Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to browse and list the directories across the entire filesystem of the host of the web application.
Published: 2022-02-04T18:55:00.000Z
Updated: 2024-08-03T22:02:51.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29397 |
vulnerable | 2026-06-08 05:31:26.151197 |
Details available
Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept users credentials transmitted in cleartext over HTTP.
Published: 2022-02-04T18:52:04.000Z
Updated: 2024-08-03T22:02:51.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29396 |
vulnerable | 2026-06-08 05:31:26.150913 |
Details available
Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various functionalities without authentication.
Published: 2022-02-04T18:50:50.000Z
Updated: 2024-08-03T22:02:51.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29395 |
vulnerable | 2026-06-08 05:31:26.150627 |
Details available
Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application.
Published: 2022-02-04T18:48:57.000Z
Updated: 2024-08-03T22:02:51.934Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29394 |
vulnerable | 2026-06-08 05:31:26.150317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29393 |
vulnerable | 2026-06-08 05:31:26.149909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.