Roothub Project vulnerabilities
We track 3 vulnerabilities in Roothub Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2024.
3vulnerabilities
3critical
0high
0exploited
9.8average CVSS score
Latest Roothub Project vulnerabilities
- 9.8 Critical severity
roothub: Unrestricted Upload of File with Dangerous Type
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.
- 9.8 Critical severity
Roothub: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.
- 9.8 Critical severity
Roothub: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.