Overit Geocall vulnerabilities

CVE-2022-22834 [HIGH] CWE-91 CVE-2022-22834: An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasfor An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution.

CVE-2019-5890 [HIGH] CWE-287 CVE-2019-5890: An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions.

CVE-2022-22835 [MEDIUM] CWE-611 CVE-2022-22835: An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem.

CVE-2019-5891 [CRITICAL] CVE-2019-5891: An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allo An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application.

CVE-2019-5889 [HIGH] CWE-22 CVE-2019-5889: An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:3469 An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.

CVE-2019-5888 [MEDIUM] CWE-79 CVE-2019-5888: Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977. Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.