Emlsoft Project Emlsoft
5 CVEs affecting Emlsoft Project Emlsoft. Latest disclosed: 2018-08-06. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14968 | Critical | 9.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter. |
CVE-2018-14967 | High | 8.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter. |
CVE-2018-14966 | High | 8.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF. |
CVE-2018-14965 | High | 8.8 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF. |
CVE-2018-14964 | Medium | 5.4 | 2018-08-06 | An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page. |