Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
sendy records in CISA KEVNo sendy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 36
SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0132 · Published 2015-01-13 · No fix listed CWE-89
Priority LOW 35
Missing Authorization vulnerability in sendy Sendy sendy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendy: from n/a through <= 3.4.2.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00273 · Published 2026-02-20 · No fix listed CWE-862
Priority LOW 35
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01203 · Published 2015-01-13 · No fix listed CWE-89
