CVE-2022-26959
Published Sep 16, 2022There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName…
Vendor archive
globalnorthstar CVEs
Beta · best-effort7 CVEs tagged to vendor globalnorthstar — 3 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2021-29398
Published Feb 4, 2022Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to br…
CVE-2021-29397
Published Feb 4, 2022Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept use…
CVE-2021-29396
Published Feb 4, 2022Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various functionalities without authentication.
CVE-2021-29395
Published Feb 4, 2022Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary fil…
CVE-2021-29394
Published Feb 4, 2022Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of an…
CVE-2021-29393
Published Feb 4, 2022Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbit…
Showing 1-7 of 7 CVEsPage 1 of 1