CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

PT-2021-17829

Name of the Vulnerable Software and Affected Versions: b2evolution version 7.2.2-stable Description: The issue allows remote attackers to obtain sensitive database information by injecting SQL commands into the cf name parameter when creating a new filter under the "Collections" tab. This occurs ...

PT-2019-19916

Name of the Vulnerable Software and Affected Versions MailSherlock versions MSR35 and MSR45 Description The issue affects multiple modules of MailSherlock, allowing an attacker to elevate the privileges of a specific account without authorization. This can be achieved through the "/useradmin/cf...