Skip to content
OpenAdvisories

Vendor

Sentrifugo

10 known vulnerabilities.

Products

Sentrifugo 10
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-29876

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the d…

    Sentrifugo Sentrifugo
  • Critical 9.8
    CVE-2024-29875

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extr…

    Sentrifugo Sentrifugo
  • Critical 9.8
    CVE-2024-29874

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/activeuserrptpdf, 'sort_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract …

    Sentrifugo Sentrifugo
  • Critical 9.8
    CVE-2024-29873

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/businessunits/format/html, 'bunitname' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract…

    Sentrifugo Sentrifugo
  • Critical 9.8
    CVE-2024-29872

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data fro…

    Sentrifugo Sentrifugo
  • Critical 9.8
    CVE-2024-29871

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted quer…

    Sentrifugo Sentrifugo
  • Critical 9.8
    CVE-2024-29870

    SQL injection vulnerability in Sentrifugo

    SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter. The exploitation of this vulnerability coul…

    Sentrifugo Sentrifugo