Filtered by vendor Kreado
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-44581 | 1 Kreado | 1 Kreasfero | 2024-11-21 | 7.5 High |
| An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter. | ||||
| CVE-2021-42675 | 1 Kreado | 1 Kreasfero | 2024-11-21 | 9.8 Critical |
| Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution. | ||||
Page 1 of 1.