Advisories · Technology
appcheap App Builder – Create Native Android & iOS Apps On The Flight.
Every CVE that names appcheap App Builder – Create Native Android & iOS Apps On The Flight among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
App Builder <= 5.5.10 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter
- appcheap App Builder – Create Native Android & iOS Apps On The Flight
- Broken access control
- CVSS 6.5 Medium
App Builder – Create Native Android & iOS Apps On The Flight <= 5.5.10 - Unauthenticated Privilege Escalation via 'role' Parameter
- appcheap App Builder – Create Native Android & iOS Apps On The Flight
- Privilege escalation
- CVSS 8.1 High
App Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 - Privilege Escalation and Account Takeover via Weak OTP
- appcheap App Builder – Create Native Android & iOS Apps On The Flight
- CWE-640
- CVSS 5.6 Medium
App Builder – Create Native Android & iOS Apps On The Flight <= 4.3.3 - Unauthenticated Limited SQL Injection via app-builder-search
- appcheap App Builder – Create Native Android & iOS Apps On The Flight
- SQL injection