Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Maarch Subscribe
Filtered by product Letterbox
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-8995 1 Maarch 1 Letterbox 2017-09-07 5.0 MEDIUM N/A
SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie.
CVE-2015-1587 1 Maarch 2 Gec\/ged, Letterbox 2015-02-20 7.5 HIGH N/A
Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.