CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 7:40 a.m.•15 views

CVE-2018-20508

CrashFix 1.0.4 has SQL Injection via the Userstatus parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search function...

9.8CVSS8.2AI score0.01452EPSS

SaveExploits1References1

CNVD•added 2018/12/28 12:0 a.m.•6 views

CrashFix SQL Injection Vulnerability

CrashFix is a backend analysis tool for CrashRpt. The tool is mainly used to receive, store, organize and analyze error reports sent by CrashRpt. A SQL injection vulnerability exists in CrashFix version 1.0.4. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with...

9.8CVSS8.6AI score0.01452EPSS

SaveExploits1References1

Prion•added 2018/12/27 1:29 p.m.•18 views

Sql injection

CrashFix 1.0.4 has SQL Injection via the Userstatus parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search function...

7.5CVSS9.7AI score0.01452EPSS

SaveExploits1References1Affected Software1

OSV•added 2018/12/27 1:29 p.m.•5 views

CVE-2018-20508

CrashFix 1.0.4 has SQL Injection via the Userstatus parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search function...

9.8CVSS5.8AI score0.01452EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by