Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: Sentrifugo Clear all filters
TI-2024-19648 CVE-2024-29879 · GHSA-6qxg-84xw-6m8w

Cross-site scripting in Sentrifugo

Priority LOW 32

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00489 Published 2024-03-21 No fix listed CWE-79
TI-2024-19647 CVE-2024-29878 · GHSA-2vwx-x49m-q6hr

Cross-site scripting in Sentrifugo

Priority LOW 32

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/sitepreference/add, 'description' parameter.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00489 Published 2024-03-21 No fix listed CWE-79
TI-2024-19646 CVE-2024-29877 · GHSA-f64p-xgr6-r5f4

Cross-site scripting in Sentrifugo

Priority LOW 32

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/expenses/expensecategories/edit, 'expense_category_name' parameter.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00502 Published 2024-03-21 No fix listed CWE-79
TI-2024-19645 CVE-2024-29876 · GHSA-qqp2-2gr9-622w

SQL injection in Sentrifugo

Priority MEDIUM 44

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00825 Published 2024-03-21 No fix listed CWE-89
TI-2024-19644 CVE-2024-29875 · GHSA-44mc-ggjv-3xj6

SQL injection in Sentrifugo

Priority MEDIUM 50

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00874 Published 2024-03-21 No fix listed CWE-89
TI-2024-19643 CVE-2024-29874 · GHSA-3525-gmp6-g5m5

SQL injection in Sentrifugo

Priority MEDIUM 50

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/activeuserrptpdf, 'sort_name' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00874 Published 2024-03-21 No fix listed CWE-89
TI-2024-19642 CVE-2024-29873 · GHSA-cxq6-hcg5-hcjv

SQL injection in Sentrifugo

Priority MEDIUM 50

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/businessunits/format/html, 'bunitname' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00825 Published 2024-03-21 No fix listed CWE-89
TI-2024-19641 CVE-2024-29872 · GHSA-mgmq-g3mf-5h3g

SQL injection in Sentrifugo

Priority MEDIUM 50

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00825 Published 2024-03-21 No fix listed CWE-89
TI-2024-19640 CVE-2024-29871 · GHSA-j67q-hvmw-6m2r

SQL injection in Sentrifugo

Priority MEDIUM 50

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00856 Published 2024-03-21 No fix listed CWE-89
TI-2024-19639 CVE-2024-29870 · GHSA-j95q-fjjg-wf7f

SQL injection in Sentrifugo

Priority MEDIUM 44

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00856 Published 2024-03-21 No fix listed CWE-89