Vulnerabilities > Sapplica > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-03-21 CVE-2024-29870 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter.
network
low complexity
sapplica
critical
9.8
2024-03-21 CVE-2024-29871 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter.
network
low complexity
sapplica
critical
9.8
2024-03-21 CVE-2024-29872 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter.
network
low complexity
sapplica
critical
9.8
2024-03-21 CVE-2024-29873 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/businessunits/format/html, 'bunitname' parameter.
network
low complexity
sapplica
critical
9.8
2024-03-21 CVE-2024-29874 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/activeuserrptpdf, 'sort_name' parameter.
network
low complexity
sapplica
critical
9.8
2024-03-21 CVE-2024-29875 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter.
network
low complexity
sapplica
critical
9.8
2024-03-21 CVE-2024-29876 Unspecified vulnerability in Sapplica Sentrifugo 3.2
SQL injection vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter.
network
low complexity
sapplica
critical
9.8
2018-08-28 CVE-2018-15873 SQL Injection vulnerability in Sapplica Sentrifugo 3.2
A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter.
network
low complexity
sapplica CWE-89
critical
9.8