Smanga vulnerabilities

2 known vulnerabilities in Smanga from Pocketmanga. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  smanga: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-34193May 20, 2024Pocketmanga

  smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading.

• 9.8 Critical severity

  Smanga: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-36076Sep 1, 2023PocketmangaEPSS 2.81%

  SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.