4 matches found
CVE-2019-16745
eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.
CVE-2019-16744
eBrigade before 5.0 has evenements.php cid SQL Injection.
CVE-2019-16743
eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.
CVE-2019-9622
eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file.