sendy

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

sendy records in CISA KEV

No sendy vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Sendy · all components

TI-2014-08275 CVE-2014-100011 · GHSA-7p8m-6352-g3gr

LOW 36

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0132 Published 2015-01-13 No fix listed CWE-89

TI-2014-08276 CVE-2014-100012 · GHSA-gf28-g4g6-24mg

LOW 35

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01203 Published 2015-01-13 No fix listed CWE-89