FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.
FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log
FUXA <= 1.1.12 is vulnerable to Local File Inclusion via /api/download.
A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.