All packages
Sefrengo vulnerabilities
3 known CVE vulnerabilities in Sefrengo, translated and rated.
- CVE-2015-1428High
Multiple SQL injection vulnerabilities in Sefrengo before version 1.6.2 allow remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or via the value_id parameter in a save_value action to backend/main.php.
- CVE-2015-0919High
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before version 1.6.1 allow remote administrators to execute arbitrary SQL commands via the (1) idcat or (2) idclient parameter to backend/main.php.
- CVE-2015-5052Critical
CVE-2015-5052 is an SQL injection vulnerability in Sefrengo before version 1.6.5 beta2.