Swallow

CVEs (4)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-6296	Cleanto Cleanto	Cri	0.64	9.8	0.01	Jan 15, 2019	Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.
CVE-2019-6295	Cleanto Cleanto	Cri	0.64	9.8	0.01	Jan 15, 2019	Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.
CVE-2018-18422	UsualToolCMS UsualToolCMS	Hig	0.57	8.8	0.00	Oct 17, 2018	UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.
CVE-2018-18215	Youke365 Youke365	Hig	0.57	8.8	0.00	Oct 11, 2018	In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.

CVE-2019-6296CriJan 15, 2019
Cleanto
Cleanto
risk 0.64cvss 9.8epss 0.01
Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.
CVE-2019-6295CriJan 15, 2019
Cleanto
Cleanto
risk 0.64cvss 9.8epss 0.01
Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.
CVE-2018-18422HigOct 17, 2018
UsualToolCMS
UsualToolCMS
risk 0.57cvss 8.8epss 0.00
UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.
CVE-2018-18215HigOct 11, 2018
Youke365
Youke365
risk 0.57cvss 8.8epss 0.00
In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.