CVE-2019-6295

CVE-2019-6295 affects Cleanto 5.0, with a SQL Injection vulnerability exploitable via the assets/lib/service_method_ajax.php service_id parameter. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CVE lists) and described as a SQLi in Cleanto 5.0. The provided data does not inclu...

CVE-2019-6296

CVE-2019-6296 affects Cleanto 5.0. The vulnerability is a SQL injection in the assets/lib/export_ajax.php id parameter, enabling a crafted input to alter queries. The CVSS data indicate high severity (CVSS v3 base score 9.8, CRITICAL, with Network attack, no authentication, and impacts to confide...