Softwarepublico vulnerabilities
We track 2 vulnerabilities in Softwarepublico products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 8, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Softwarepublico vulnerabilities
- 8.8 High severity
E-sic Livre: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component.
- 9.8 Critical severity
I3geo: Improper Limitation of a Pathname to a Restricted Directory
A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.