Vulnerabilities

TI-2017-09313 CVE-2017-12586 · GHSA-p9vm-qp96-wp3x

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory…

LOW 34

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02666 Published 2017-08-06 No fix listed CWE-22

TI-2017-09312 CVE-2017-12585 · GHSA-9gcv-89r6-88gw

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php…

MEDIUM 42

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01745 Published 2017-08-06 No fix listed CWE-89

Vulnerabilities

Filters

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory…

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php…