Vendors / Skymoonlabs Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 1
Exploited now Skymoonlabs records in CISA KEV No Skymoonlabs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00565 · Published 2024-02-28 · No fix listed CWE-89
Priority MEDIUM 50
Unrestricted Upload of File with Dangerous Type vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.0063 · Published 2024-02-26 · No fix listed CWE-434
Priority MEDIUM 50
Missing Authorization vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00582 · Published 2024-03-21 · No fix listed CWE-862
Priority MEDIUM 45
Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01331 · Published 2019-01-15 · No fix listed CWE-89
Priority MEDIUM 45
Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01342 · Published 2019-01-15 · No fix listed CWE-89
Priority MEDIUM 44
Missing Authorization vulnerability in Skymoon Labs MoveTo.This issue affects MoveTo: from n/a through 6.2.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00529 · Published 2024-04-16 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
5 1 0 0 0
THREATIST.IORead the docs