Sentrifugo vulnerabilities
We track 7 vulnerabilities in Sentrifugo products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2024.
Latest Sentrifugo vulnerabilities
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the dat
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extrac
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/activeuserrptpdf, 'sort_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract a
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/businessunits/format/html, 'bunitname' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query
- 9.8 Critical severity
Sentrifugo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter. The exploitation of this vulnerability could