Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Paroiciel Clear all filters
TI-2018-15655 CVE-2018-25430 · GHSA-7r9v-3x2r-9g6r

Paroiciel 11.20 SQL Injection via eGeqIdEquipe Parameter

Priority MEDIUM 64

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eGeqIdEquipe parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00273 Published 2026-06-01 No fix listed CWE-89
TI-2018-15654 CVE-2018-25429 · GHSA-w52p-mgrp-j6m5

Paroiciel 11.20 SQL Injection via zProIdPro Parameter

Priority MEDIUM 64

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zProIdPro parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00273 Published 2026-06-01 No fix listed CWE-89
TI-2018-15653 CVE-2018-25428 · GHSA-c2wr-3mhp-wpjm

Paroiciel 11.20 SQL Injection via tRecIdListe Parameter

Priority MEDIUM 44

Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tRecIdListe parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00341 Published 2026-06-01 No fix listed CWE-89