← Back

Echor

echor

Vendor: Echor Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-1835
1Echor Project
1Echor
Nov 21, 2024
Feb 2, 2018
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.
CVE-2014-1834
1Echor Project
1Echor
Nov 21, 2024
Feb 2, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password.