TI-2015-04236 CVE-2015-5052 · GHSA-jxhj-9qp4-8pq7
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
Priority MEDIUM 44
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
Vulnerabilities
4 records
TI-2015-01296 CVE-2015-1428 · GHSA-6xq2-x377-w2pf
Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote…
Priority LOW 38
Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or (2) remote authenticated users to exe…
TI-2015-00856 CVE-2015-0919 · GHSA-cxg5-hq83-f2jf
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before…
Priority LOW 37
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrators to execute arbitrary SQL commands via the (1) idcat or (2) idclient parameter to backend/main.php.
TI-2015-00855 CVE-2015-0918 · GHSA-gc5h-6j35-8vvh
Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php.