Vulnerabilidades de WellChoose
CVEs publicadas que afetam produtos de WellChoose: 6 registro(s), com severidade, exploração e correções.
CVE-2026-3826
Crítica · 9.8
CWE-98 11/03/2026
WellChoose｜IFTOP - Local File Inclusion
IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.
CVE-2026-3825
Média · 6.1
CWE-79 11/03/2026
WellChoose｜IFTOP - Reflected Cross-site Scripting
IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
CVE-2026-3824
Média · 6.1
CWE-601 11/03/2026
WellChoose｜IFTOP - Open redirect
IFTOP developed by WellChoose has an Open redirect vulnerability, allowing authenticated remote attackers to craft a URL that tricks users into visiting malicious website.
CVE-2026-1429
Média · 5.4
CWE-79 26/01/2026
WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting
Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
CVE-2026-1428
Alta · 8.8
CWE-78 26/01/2026
WellChoose｜Single Sign-On Portal System - OS Command Injection
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-1427
Alta · 8.8
CWE-78 26/01/2026
WellChoose｜Single Sign-On Portal System - OS Command Injection
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.