Thinkingreed vulnerabilities
We track 2 vulnerabilities in Thinkingreed products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2023.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Thinkingreed vulnerabilities
- 8.8 High severity
OSS Calendar: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.
- 9.8 Critical severity
F-RevoCRM: Improper Neutralization of Special Elements used in an OS Command
F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.