Archerydms vulnerabilities
We track 4 vulnerabilities in Archerydms products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 16, 2023.
Latest Archerydms vulnerabilities
- 7.5 High severity
Archery: Use of Hard-coded Credentials
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
- 9.8 Critical severity
Archery: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has released an update, please upgrade to v1.9.0 and above.
- 9.8 Critical severity
Archery: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.
- 9.8 Critical severity
Archery: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface.