PT-2020-11979

Name of the Vulnerable Software and Affected Versions Sapplica Sentrifugo version 3.2 Description A Blind SQL Injection issue was discovered in the software. The issue is related to the addAction function in the HolidaydatesController.php file. It can be exploited via the id parameter in the...

CVE-2020-10218: Improper Neutralization of Special Elements used in an SQL Command

A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...