https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T22:15:30.639227+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2019-03582 cnvd-2019-03582 2026-11-11T22:15:30.643650+00:00 cnvd-2019-03582 https://db.gcve.eu/vuln/fkie_cve-2018-20508 fkie_cve-2018-20508 2026-11-11T22:15:30.643718+00:00

CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function.

 https://db.gcve.eu/vuln/ghsa-965r-pr3w-937g GHSA-965r-pr3w-937g 2026-11-11T22:15:30.643770+00:00

CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function.

 https://db.gcve.eu/vuln/gsd-2018-20508 gsd-2018-20508 2026-11-11T22:15:30.643795+00:00 gsd-2018-20508