Skip to content
OpenAdvisories

Vendor

Kados

11 known vulnerabilities.

11 results · Clear filters · Feed

  • High 8.2

    Kados R10 GreenBee SQL Injection via update_feature.php

    Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the feature_id parameter of boards_buttons/update_feature.php. The feature_id value is concat…

  • High 8.2

    Kados R10 GreenBee SQL Injection via update_release.php

    Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the release_id parameter of boards_buttons/update_release.php. The release_id value is concat…

  • High 8.2

    Kados R10 GreenBee SQL Injection via filter_user_mail

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter. Attackers can send crafted requests with malicious SQL statements to extract sensitiv…

  • High 8.2

    Kados R10 GreenBee SQL Injection via id_project Parameter

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter. Attackers can send crafted requests with malicious SQL statements in the id_project paramet…

  • High 8.2

    Kados R10 GreenBee SQL Injection via sort_direction Parameter

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter. Attackers can submit malicious SQL statements in the sort_direction parameter to extrac…

  • High 8.2

    Kados R10 GreenBee SQL Injection via id_to_delete Parameter

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter. Attackers can send crafted requests with malicious SQL statements in the id_to_delete fie…

  • High 8.2

    Kados R10 GreenBee SQL Injection via language_tag Parameter

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the language_tag parameter. Attackers can submit malicious SQL statements in the language_tag parameter to extract se…

  • High 8.2

    Kados R10 GreenBee SQL Injection via user2reset

    Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parameter. Attackers can send crafted requests with malicious SQL payloads to extract …

  • High 8.2

    Kados R10 GreenBee SQL Injection via id_to_modify Parameter

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id_to_modify' parameter. Attackers can send crafted requests with malicious SQL statements in the id_to_modify f…

  • High 8.2

    Kados R10 GreenBee SQL Injection via mng_profile_id

    Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter. Attackers can send crafted requests with malicious SQL payloads in the mng_profile_id p…

  • High 8.2

    Kados R10 GreenBee SQL Injection via menu_lev1 Parameter

    Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_lev1 parameter. Attackers can send crafted requests with malicious SQL payloads in the menu_…