Kreado Kreasfero
2 CVEs affecting Kreado Kreasfero. Latest disclosed: 2022-06-14. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42675 | Critical | 9.8 | 2022-06-14 | Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution. |
CVE-2021-44581 | High | 7.5 | 2022-03-29 | An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter. |