← All credits

Eddie Zaltsman (Ultra-Red), Yotam Zaltsman (Sling)

4 vulnerability records and advisories credit this contributor.

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method