Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Computing For Good Component: Computing For Good's Basic Laboratory Information System Clear all filters
TI-2019-15731 CVE-2019-25678 · GHSA-r47r-9pfj-fpj9

C4G BLIS 3.4 SQL Injection via users_select.php

Priority HIGH 77

C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the site parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00283 Published 2026-04-05 No fix listed CWE-306
TI-2019-04007 CVE-2019-5644 · GHSA-pfxc-95p3-jhv6

C4G BLIS Improper Access Control

Priority MEDIUM 46

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter sev…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0132 Published 2019-11-06 No fix listed CWE-284
TI-2019-04006 CVE-2019-5643 · GHSA-xm3p-h74w-hwrq

C4G BLIS Improper Access Control

Priority LOW 26

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00902 Published 2019-11-06 No fix listed CWE-284
TI-2019-03982 CVE-2019-5617 · GHSA-jj7f-f2vq-pvc7

C4G BLIS Improper Access Control

Priority MEDIUM 46

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change th…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0132 Published 2019-11-06 No fix listed CWE-284