irontec klear-library vulnerabilities

Latest irontec klear-library CVEs

Newest publication first

1. CVE-2015-10084 irontec klear-library BaseController.php _prepareWhere sql injection

   Published 2023-02-21

   Critical·CVSS 9.8 EPSS 0.69%

   A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the function _prepareWhere of the file Controller/Rest/BaseController.php. The manipulation leads to sql injection. Upgrading to version marla is able to address this is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.