Lucene search

Sis Handball Security Vulnerabilities - 2023

cve

CVE-2023-33924

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45.

9.8CVSS

9.7AI Score

0.001EPSS

2023-11-06 09:15 AM

cve

CVE-2023-41684

Cross-Site Request Forgery (CSRF) vulnerability in Felix Welberg SIS Handball plugin <= 1.0.45 versions.

8.8CVSS

8.8AI Score

0.001EPSS

2023-10-10 07:15 AM