Inis vulnerabilities
We track 3 vulnerabilities in Inis products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 9, 2024.
Latest Inis vulnerabilities
- 9.8 Critical severity
Inis: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the pu
- 7.5 High severity
Inis: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to pa
- 8.8 High severity
Inis: Server-Side Request Forgery
A vulnerability was found in Inis up to 2.0.1. It has been rated as critical. This issue affects some unknown processing of the file app/api/controller/default/Proxy.php. The manipulation of the argument p_url leads to server-side request forgery. The attack m