3 matches found
CVE-2019-10678
Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.
CVE-2019-10664
Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.
CVE-2019-15480
Domoticz 4.10717 has XSS via item.Name.