CVE-2019-13489

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

CVE-2019-13489: Improper Neutralization of Special Elements used in an SQL Command

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

PT-2019-13366

Name of the Vulnerable Software and Affected Versions Trape through 2019-05-08 Description The issue is related to SQL injection via the data2 variable in core/db.py. This can be demonstrated by the "/bs t" parameter, which is an API endpoint. Recommendations For versions through 2019-05-08,...