← Back

Databasir Project

databasir_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Databasir
databasir
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24862
1Databasir Project
1Databasir
Nov 21, 2024
Apr 20, 2022
N/A· v4
7.7 HIGH· v3
4.0 MEDIUM· v2
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the correspondi...Show more
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address will return a response page with complete error information when accessing a non-existent URL. Attackers can take advantage of this feature for SSRF.Show less
CVE-2022-24860
1Databasir Project
1Databasir
Nov 21, 2024
Apr 20, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of...Show more
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.Show less