CVE-2014-8945

Name of the Vulnerable Software and Affected Versions: Lexiglot versions through 2014-11-20

Description: The issue allows command injection via the username and password fields in the "admin.php?page=projects" endpoint.

Recommendations: For versions through 2014-11-20, update to a version released after 2014-11-20 to resolve the issue. As a temporary workaround, consider restricting access to the "admin.php?page=projects" endpoint until a patch is available. Avoid using the username and password fields in the affected endpoint until the issue is resolved.