Zfaka Project: >> Zfaka >> 1.0.3 Security Vulnerabilities
An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote command execution.
CVSS Score
9.8
EPSS Score
0.017
Published
2022-02-21
A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foreground and add a background administrator account.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-01-28