Known vulnerabilities in FlamingoIM

Vendor: balloonwj
Software: FlamingoIM
Software CPE: cpe:2.3:a:balloonwj:flamingo:*:*:*:*:*:*:*:*
Website: https://github.com/balloonwj
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FlamingoIM FlamingoIM is affected by 5 known vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49198 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-35245		 CWE-89 Medium
No
No
 - 26.12.2020 SB2020122918
#VU49199 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-35242		 CWE-89 Medium
No
No
 - 26.12.2020 SB2020122918
#VU49200 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-35243		 CWE-89 Medium
No
No
 - 26.12.2020 SB2020122918
#VU49201 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-35244		 CWE-89 Medium
No
No
 - 26.12.2020 SB2020122918
#VU49202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-35284		 CWE-22 Medium
No
No
 - 26.12.2020 SB2020122918