Akasia

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-12586 Aug 06, 03:29 MEDIUM POC This Month

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Akasia Slims

NVD GitHub

CVSS 3.0

6.5

EPSS

0.3%

CVE-2017-12585 Aug 06, 03:29 HIGH POC This Week

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Akasia Slims

NVD GitHub

CVSS 3.0

8.8

EPSS

0.5%

CVE-2017-12586

EPSS 0% CVSS 6.5

MEDIUM POC This Month

PHP Path Traversal Akasia +1

NVD GitHub

CVE-2017-12585

EPSS 1% CVSS 8.8

HIGH POC This Week

PHP SQLi Akasia +1

NVD GitHub