Veille CVE

Recherche « Supsystic Ultimate Maps by Supsystic »

7 CVE

Critique 1 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Supsystic Ultimate Maps by Supsystic » ✕
  1. CVE-2026-102397 6.5 Moyenne

    supsystic Ultimate Maps by Supsystic

    Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= 1.5.5 versions.

  2. CVE-2026-102396 7.1 Élevée

    supsystic Ultimate Maps by Supsystic

    Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions.

  3. CVE-2026-85309 5.3 Moyenne

    Supsystic Ultimate Maps by Supsystic

    Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3.

  4. CVE-2026-73377 7.5 Élevée

    supsystic Ultimate Maps by Supsystic

    Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.

  5. CVE-2026-73376 9.8 Critique

    supsystic Ultimate Maps by Supsystic

    Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.

  6. CVE-2026-73375 7.1 Élevée

    supsystic Ultimate Maps by Supsystic

    Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.

  7. CVE-2020-37242 8.2 Élevée

    Supsystic Ultimate Maps

    Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or time-based blind SQL injection payloads to extract sensitive database information.