Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2019-25697 is a high severity SQL injection in CMSsite 1.0 through the cat_id parameter of category.php. No fix is named, so retire or lock it down.
CVE-2019-25696 is a high severity SQL injection in Kados R10 GreenBee via language_tag. No fix is named, so restrict access and plan a replacement.
CVE-2019-25694 is a high SQL injection in Kados R10 GreenBee. No fix is confirmed, so restrict access, use prepared statements and check the vendor.
CVE-2019-25692 is a high SQL injection in Kados R10 GreenBee. No fix is confirmed, so restrict access, use prepared statements and check the vendor.
CVE-2019-25688 is a high SQL injection in Kados R10 GreenBee. No fix is confirmed, so restrict access, use prepared statements and check the vendor.
CVE-2019-25680 is a high SQL injection in Advance Gift Shop Pro Script. No fix is confirmed: restrict access, use prepared statements, ask the vendor.
CVE-2019-25676 is a high severity XSS and SQL injection pair in Ask Expert Script 3.0.5. No fix is confirmed. Restrict the pages and fix input handling.
CVE-2019-25674 is a high SQL injection in CMSsite 1.0. No fix is confirmed, so restrict access, use prepared statements and check the vendor.
CVE-2019-25528 is a high SQL injection in Inout EasyRooms Ultimate Edition. No fix is confirmed: restrict access, use prepared statements, ask the vendor.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
