Pocketmanga vulnerabilities
We track 2 vulnerabilities in Pocketmanga products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 20, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Pocketmanga vulnerabilities
- 7.5 High severity
smanga: Improper Limitation of a Pathname to a Restricted Directory
smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading.
- 9.8 Critical severity
Smanga: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.