Vendors / Ebrigade Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Ebrigade records in CISA KEV No Ebrigade vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00269 · Published 2026-04-12 · No fix listed CWE-89
Priority MEDIUM 42
eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01743 · Published 2019-09-30 · No fix listed CWE-89
Priority MEDIUM 42
eBrigade before 5.0 has evenements.php cid SQL Injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01743 · Published 2019-09-30 · No fix listed CWE-89
Priority MEDIUM 42
eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01743 · Published 2019-09-30 · No fix listed CWE-89
Priority LOW 28
eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file.
CVSS 3.0 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.04796 · Published 2019-03-07 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
0 4 1 0 0
THREATIST.IORead the docs