Filtered by vendor Ebrigade Subscriptions
Filtered by product Ebrigade Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16743 1 Ebrigade 1 Ebrigade 2024-08-05 8.8 High
eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.
CVE-2019-16744 1 Ebrigade 1 Ebrigade 2024-08-05 8.8 High
eBrigade before 5.0 has evenements.php cid SQL Injection.
CVE-2019-16745 1 Ebrigade 1 Ebrigade 2024-08-05 8.8 High
eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.
CVE-2019-9622 1 Ebrigade 1 Ebrigade 2024-08-04 N/A
eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file.