Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code injection. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-06-26T16:00:00

Updated: 2024-08-05T12:40:47.292Z

Reserved: 2018-04-30T00:00:00

Link: CVE-2018-1000552

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-06-26T16:29:02.650

Modified: 2024-11-21T03:40:10.933

Link: CVE-2018-1000552

cve-icon Redhat

No data.