Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Critical Severity Vulnerabilities

Found 2957 vulnerabilities at Critical severity.

Reference
Title
Technology
CVE-2018-1999019
Chamilo Improper Control of Generation of Code (Code Injection) Vulnerability
Chamilo
CVE-2021-34187
Chamilo Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Chamilo
CVE-2021-35414
Chamilo Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Chamilo
CVE-2022-27423
Chamilo Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Chamilo
CVE-2023-34944
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability
Chamilo
CVE-2023-34960
Chamilo Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability
Chamilo
CVE-2023-3368
Chamilo Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
Chamilo
CVE-2023-3545
Chamilo Improper Handling of Case Sensitivity Vulnerability
Chamilo
CVE-2023-3533
Chamilo Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Chamilo
CVE-2025-52998
Chamilo Deserialization of Untrusted Data Vulnerability
Chamilo
CVE-2025-50199
Chamilo Server-Side Request Forgery (SSRF) Vulnerability
Chamilo
CVE-2025-50192
Chamilo Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Chamilo
CVE-2025-50190
Chamilo Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Chamilo
CVE-2025-50187
Chamilo Improper Neutralization of Directives in Dynamically Evaluated Code (Eval Injection) Vulnerability
Chamilo
CVE-2025-59543
Chamilo Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Chamilo
CVE-2025-59542
Chamilo Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Chamilo
CVE-2025-55289
Chamilo Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Chamilo
CVE-2025-55208
Chamilo Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Chamilo
CVE-2026-28430
Chamilo Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Chamilo
CVE-2026-33707
Chamilo Weak Password Recovery Mechanism for Forgotten Password Vulnerability
Chamilo
CVE-2026-33698
Chamilo Files or Directories Accessible to External Parties Vulnerability
Chamilo
CVE-2007-4338
Family Connections Permissions Privileges and Access Controls Vulnerability
Family Connections
CVE-2014-7985
EspoCRM Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
EspoCRM
CVE-2020-37094
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability
EspoCRM
CVE-2026-33656
EspoCRM Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
EspoCRM
CVE-2017-11187
phpMyFAQ Improper Restriction of Excessive Authentication Attempts Vulnerability
phpMyFAQ
CVE-2022-3754
phpMyFAQ Weak Password Requirements Vulnerability
phpMyFAQ
CVE-2023-0311
phpMyFAQ Improper Authentication Vulnerability
phpMyFAQ
CVE-2023-0307
phpMyFAQ Weak Password Requirements Vulnerability
phpMyFAQ
CVE-2023-0788
phpMyFAQ Improper Control of Generation of Code (Code Injection) Vulnerability
phpMyFAQ