CVE-2023-34750

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit...

CVE-2014-8943

Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svnurl parameter...

CVE-2014-8945

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

PT-2020-7766

Name of the Vulnerable Software and Affected Versions: Lexiglot versions prior to 2014-11-20 Description: The issue allows for Server-Side Request Forgery SSRF via the svn url parameter in the admin.php?page=projects endpoint. This means an attacker could potentially force the server to make...

PT-2020-7768

Name of the Vulnerable Software and Affected Versions: Lexiglot versions through 2014-11-20 Description: The issue allows command injection via the username and password fields in the "admin.php?page=projects" endpoint. Recommendations: For versions through 2014-11-20, update to a version release...

CVE-2014-8945: Improper Neutralization of Special Elements used in an OS Command

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...