trovebox
Web & CMS Pluginsoss-project
Top products
Latest CVEs
The 4 most recently published vulnerabilities affecting trovebox.
- CVE-2018-1000552Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code injection. This attack appear to be exploitable via HTTP request. This vulnerabil...8.8
- CVE-2018-1000553Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. This attack appear to be exploitable vi...8.8
- CVE-2018-1000551Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component that can result in Authentication bypass. This attack appear to be exploitable via HTTP Request. Thi...8.8
- CVE-2018-1000554Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that can result in Password reset. This attack appear to be exploitable via HTTP requ...9.8