Zfaka Project vulnerabilities
We track 2 vulnerabilities in Zfaka Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 21, 2022.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Zfaka Project vulnerabilities
- 9.8 Critical severity
Zfaka: Unrestricted Upload of File with Dangerous Type
An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote command execution.
- 9.8 Critical severity
Zfaka: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foreground and add a background administrator account.