Frangoteam: >> Fuxa >> 1.1.5 Security Vulnerabilities
A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.
CVSS Score
7.5
EPSS Score
0.252
Published
2023-09-22
FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.
CVSS Score
7.5
EPSS Score
0.099
Published
2023-09-22
FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.
CVSS Score
9.8
EPSS Score
0.599
Published
2023-09-22
FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log
CVSS Score
7.5
EPSS Score
0.309
Published
2023-09-22