CVE-2019-13489

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

CVE-2019-13489

Trape (up to 2019-05-08) contains an SQL injection in the data[2] variable handled by core/db.py, allowing potentially arbitrary SQL execution. The root cause cited (CNVD) is lack of validation of externally entered SQL statements in database-based applications. No remediation details are provide...

CVE-2019-13489

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

PT-2019-13366

Name of the Vulnerable Software and Affected Versions Trape through 2019-05-08 Description The issue is related to SQL injection via the data2 variable in core/db.py. This can be demonstrated by the "/bs t" parameter, which is an API endpoint. Recommendations For versions through 2019-05-08,...

CVE-2019-13489: Improper Neutralization of Special Elements used in an SQL Command

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

PT-2019-18986

Name of the Vulnerable Software and Affected Versions Themerig Find a Place CMS Directory version 1.5 Description The issue is related to SQL Injection, which occurs via the cate parameter in the "find/assets/external/data 2.php" endpoint. Recommendations For Themerig Find a Place CMS Directory...