Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2018-20779 | 1 Traq | 1 Traq | 2019-02-11 | 7.5 HIGH | 9.8 CRITICAL |
Traq 3.7.1 allows SQL Injection via a tickets?search= URI. | |||||
CVE-2018-20780 | 1 Traq | 1 Traq | 2019-02-11 | 6.8 MEDIUM | 8.8 HIGH |
Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1). |