Cygnux Syspass
2 CVEs affecting Cygnux Syspass. Latest disclosed: 2017-11-17. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000192 | Critical | 9.8 | 2017-11-17 | Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the co… |
CVE-2015-6516 | | 2015-08-18 | SQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated users to execute arbitrary SQL commands via the search paramete… |