CVE-2024-48773

An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2021-31632

b2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter cfqueryparam in the User login section. This vulnerability allows attackers to execute arbitrary code via a crafted input...

CVE-2021-31631

CVE-2021-31631 affects b2evolution CMS v7.2.3, where a Cross-Site Request Forgery (CSRF) on the user login page can be leveraged to elevate privileges. The Red Hat, CNVD, OSV and other connected records corroborate the same description and identify the affected product and vulnerability class, wi...