Vulnerabilities (CVE)

Filtered by vendor Yeswiki Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-1000641 1 Yeswiki 1 Yeswiki 2020-08-24 7.5 HIGH 9.8 CRITICAL
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information.
CVE-2018-13045 1 Yeswiki 1 Cercopitheque 2019-01-09 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter.