Zfaka Project Zfaka
2 CVEs affecting Zfaka Project Zfaka. Latest disclosed: 2022-02-21. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24553 | Critical | 9.8 | 2022-02-21 | An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote command execution. |
CVE-2022-22294 | Critical | 9.8 | 2022-01-28 | A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foreground and add a background administrator ac… |