Vulnerabilities > Freetakserver UI Project > Freetakserver UI > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-03-11 | CVE-2022-25506 | SQL Injection vulnerability in Freetakserver-Ui Project Freetakserver-Ui 1.9.8 FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser. | 6.5 |
| 2022-03-11 | CVE-2022-25507 | Cross-site Scripting vulnerability in Freetakserver-Ui Project Freetakserver-Ui 1.9.8 FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter. | 5.4 |
| 2022-03-11 | CVE-2022-25511 | Unspecified vulnerability in Freetakserver-Ui Project Freetakserver-Ui 1.9.8 An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system. | 6.5 |