Lucene search
+L
CygnuxSyspass

2 matches found

CVE
CVE
added 2015/08/18 3:0 p.m.47 views

CVE-2015-6516

sysPass (cygnux.org) is affected by a SQL injection vulnerability in versions 1.0.9 and earlier. The flaw arises in ajax/ajax_search.php where the search parameter is not properly filtered, allowing remote authenticated users to execute arbitrary SQL commands. This aligns with multiple sources (N...

6.5CVSS8.2AI score0.02002EPSS
SaveWeb
CVE
CVE
added 2017/11/17 5:0 p.m.46 views

CVE-2017-1000192

Cygnux sysPass

9.8CVSS9.3AI score0.00886EPSS
Save