Vendors / Sentrifugo Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 4
Exploited now Sentrifugo records in CISA KEV No Sentrifugo vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.33236 · Published 2019-09-04 · No fix listed CWE-434
Priority MEDIUM 50
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00874 · Published 2024-03-21 · No fix listed CWE-89
Priority MEDIUM 50
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/activeuserrptpdf, 'sort_name' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00874 · Published 2024-03-21 · No fix listed CWE-89
Priority MEDIUM 50
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/businessunits/format/html, 'bunitname' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00825 · Published 2024-03-21 · No fix listed CWE-89
Priority MEDIUM 50
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00825 · Published 2024-03-21 · No fix listed CWE-89
Priority MEDIUM 50
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00856 · Published 2024-03-21 · No fix listed CWE-89
Priority MEDIUM 44
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00825 · Published 2024-03-21 · No fix listed CWE-89
Priority MEDIUM 44
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00856 · Published 2024-03-21 · No fix listed CWE-89
Priority LOW 32
Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00489 · Published 2024-03-21 · No fix listed CWE-79
Priority LOW 32
Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/sitepreference/add, 'description' parameter.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00489 · Published 2024-03-21 · No fix listed CWE-79
Priority LOW 32
Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/expenses/expensecategories/edit, 'expense_category_name' parameter.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00502 · Published 2024-03-21 · No fix listed CWE-79
Priority LOW 28
Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01581 · Published 2019-09-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
7 4 1 0 0
THREATIST.IORead the docs