Archery vulnerabilities
4 known vulnerabilities in Archery from Archerydms. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Archery: Use of Hard-coded Credentials
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
- 9.8 Critical severity
Archery: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has released an update, please upgrade to v1.9.0 and above.
- 9.8 Critical severity
Archery: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.
- 9.8 Critical severity
Archery: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface.