Limbas

limbas

Vendor: Limbas • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-28294 1Limbas 1Limbas Jun 17, 2026 Apr 29, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter.
CVE-2024-1784 1Limbas 1Limbas Jun 17, 2026 Feb 23, 2024 N/A· v4 6.6 MEDIUM· v3 3.7 LOW· v2 A vulnerability classified as problematic was found in Limbas 5.2.14. Affected by this vulnerability is an unknown functionality of the file main_admin.php. The manipulation of the argument tab_group leads to sql injecti...Show more A vulnerability classified as problematic was found in Limbas 5.2.14. Affected by this vulnerability is an unknown functionality of the file main_admin.php. The manipulation of the argument tab_group leads to sql injection. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254575. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2022-28454 1Limbas 1Limbas Jun 17, 2026 Apr 28, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS).