Boxug Trape vulnerabilities

• boxug trape Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register... CVE-2017-17714 6.1 MediumDecember 16, 2017
• boxug trape Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the ... CVE-2017-17713 9.8 CriticalDecember 16, 2017