TI-2015-04236 CVE-2015-5052 · GHSA-jxhj-9qp4-8pq7
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
Priority MEDIUM 44
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
Sefrengo
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Sefrengo records in CISA KEVNo Sefrengo vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2015-01296 CVE-2015-1428 · GHSA-6xq2-x377-w2pf
Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote…
Priority LOW 38
Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or (2) remote authenticated users to exe…
TI-2015-00856 CVE-2015-0919 · GHSA-cxg5-hq83-f2jf
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before…
Priority LOW 37
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrators to execute arbitrary SQL commands via the (1) idcat or (2) idclient parameter to backend/main.php.
TI-2015-00855 CVE-2015-0918 · GHSA-gc5h-6j35-8vvh
Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php.