Crashfix Project Crashfix
1 CVEs affecting Crashfix Project Crashfix. Latest disclosed: 2018-12-27. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20508 | Critical | 9.8 | 2018-12-27 | CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search… |