3 matches found
Fortinet FortiSandbox 4.4.x < 4.4.9 OS Command Injection (FG-IR-26-100)
The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9. It is, therefore, affected by a vulnerability: - An improper neutralization of special elements used in an OS command injection vulnerability may allow an attacker to execute unauthorized code or commands...
9.8CVSS9AI score0.92819EPSS
SaveExploits7References2
CVE-2021-24864
The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...
8.8CVSS7.3AI score0.01221EPSS
SaveExploits1References3
20