CentralSquare vulnerabilities
We track 2 vulnerabilities in CentralSquare products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest CentralSquare vulnerabilities
- 9.8 Critical severity
eTRAKiT.Net: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrary commands as the current MS SQL server account. It is recommended that the CRM feature is turned off
- 7.5 High severity
crywolf: Improper Limitation of a Pathname to a Restricted Directory
A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive