Liman

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-37007 Jan 29, 15:16 MEDIUM POC This Month

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. [CVSS 5.3 MEDIUM]

CSRF Liman

NVD GitHub Exploit-DB

CVSS 3.1

5.3

EPSS

0.0%

CVE-2021-3855 Mar 01, 08:15 HIGH This Week

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Management System Liman MYS (HTTP/Controllers, CronMail, Jobs modules) allows. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Liman Port Mys

NVD VulDB

CVSS 3.1

8.8

EPSS

5.0%

CVE-2020-37007

EPSS 0% CVSS 5.3

MEDIUM POC This Month

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. [CVSS 5.3 MEDIUM]

CSRF Liman

NVD GitHub Exploit-DB

CVE-2021-3855

EPSS 5% CVSS 8.8

HIGH This Week

Command Injection Liman Port Mys

NVD VulDB