Skip to content
OpenAdvisories

Package · Packagist

bacula-web/bacula-web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2025-45346 Public exploit

    Bacula-web SQL Injection Vulnerability

    SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

    bacula-web/bacula-web Packagist
  • Critical 9.8
    CVE-2017-15367 Public exploit EPSS 23%

    Bacula-web SQL Injection Vulnerabilities

    Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.

    bacula-web/bacula-web Packagist