Laubrotel

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Laubrotel records in CISA KEV

No Laubrotel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

G.cms Generator 1 record LOW Lbstopattack 1 record MEDIUM

Records

2 records

TI-2022-02858 CVE-2022-3097 · GHSA-rjwc-8f5q-7v36

LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF

MEDIUM 62

The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00424 Published 2022-10-25 Fixed in 1.1.3

TI-2010-02341 CVE-2010-2438 · GHSA-cjw8-32q9-h987

SQL injection vulnerability in G.CMS generator allows remote attackers to execute…

LOW 35

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2010-06-24 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0