Softwarepublico: >> I3geo Security Vulnerabilities
Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.php.
CVSS Score
6.1
EPSS Score
0.087
Published
2022-07-14
Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.
CVSS Score
6.1
EPSS Score
0.113
Published
2022-07-14
A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.
CVSS Score
9.8
EPSS Score
0.898
Published
2022-07-14
Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via svg2img.php.
CVSS Score
6.1
EPSS Score
0.002
Published
2022-07-14