Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-1427 1 Wellchoose 1 Single Sign-on Portal System 2026-03-11 8.8 High
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-1428 1 Wellchoose 2 Single Sign-on Portal System, Single Sign On Portal System 2026-03-11 8.8 High
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-1429 1 Wellchoose 1 Single Sign-on Portal System 2026-03-11 5.4 Medium
Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.