GHSA-j6r3-mvc3-qhh4HighCVSS 8.8

A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function...

Published
May 29, 2026
Last Modified
May 29, 2026

🔗 CVE IDs covered (1)

📋 Description

A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function get_ups_field of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

🔗 References (6)