Veille CVE

Recherche « Paolo GeoDirectory »

8 CVE

  1. CVE-2026-84813 9.3 Critique

    Paolo GeoDirectory

    Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.

  2. CVE-2026-81271 8.8 Élevée

    Paolo GeoDirectory

    Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.

  3. CVE-2026-66604 7.1 Élevée

    Paolo GeoDirectory

    Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

  4. CVE-2026-68565 6.5 Moyenne

    Paolo GeoDirectory

    Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.

  5. CVE-2026-57681 6.4 Moyenne

    Paolo GeoDirectory

    Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.

  6. CVE-2026-54831 9.3 Critique

    Paolo GeoDirectory

    Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.

  7. CVE-2026-39512 9.3 Critique

    Paolo GeoDirectory

    Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

  8. CVE-2026-42671 6.5 Moyenne

    Paolo GeoDirectory

    Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.