Skip to content

Sapplica Sentrifugo vulnerabilities

sapplica sentrifugoCross-Site Scripting (XSS) vulnerability in SentrifugoCVE-2024-298797.1 HighMarch 21, 2024
sapplica sentrifugoCross-Site Scripting (XSS) vulnerability in SentrifugoCVE-2024-298787.1 HighMarch 21, 2024
sapplica sentrifugoCross-Site Scripting (XSS) vulnerability in SentrifugoCVE-2024-298777.1 HighMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298769.8 CriticalMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298759.8 CriticalMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298749.8 CriticalMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298739.8 CriticalMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298729.8 CriticalMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298719.8 CriticalMarch 21, 2024
sapplica sentrifugoSQL injection vulnerability in SentrifugoCVE-2024-298709.8 CriticalMarch 21, 2024
sapplica sentrifugoIn Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated...CVE-2023-297708.8 HighNovember 27, 2023
sapplica sentrifugo** UNSUPPORTED WHEN ASSIGNED ** Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS)...CVE-2020-283656.1 MediumDecember 30, 2020
sapplica sentrifugoIn Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images"...CVE-2020-268038.8 HighNovember 12, 2020
sapplica sentrifugoIn Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab....CVE-2020-268048.8 HighNovember 12, 2020
sapplica sentrifugoIn Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index...CVE-2020-268057.2 HighNovember 12, 2020
sapplica sentrifugoA Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php...CVE-2020-102186.5 MediumMarch 13, 2020
sapplica sentrifugoSentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator...CVE-2019-160598.8 HighSeptember 6, 2019
sapplica sentrifugoA SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter.CVE-2018-158739.8 CriticalAugust 28, 2018