Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-13489

Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Trape Project
Products
Trape
CVE-2019-13488

A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend() method is used.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Trape Project
Products
Trape