Lucene search
K

10 matches found

NVD
NVD
added 2026/01/21 6:16 p.m.2 views

CVE-2021-47873

VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the 'vinterface' parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payload...

7.2CVSS0.00055EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/21 5:27 p.m.1 views

CVE-2021-47873

VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the 'vinterface' parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payload...

7.2CVSS5AI score0.00055EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/01/21 5:27 p.m.4 views

CVE-2021-47873

VestaCP is affected in versions prior to 0.9.8-25 by a stored XSS in the IP interface configuration. The vulnerability hinges on the v_interface parameter and can be exploited by sending a crafted POST to the add/ip/ endpoint to inject scripts. This is a cross-site scripting issue with potential ...

7.2CVSS5AI score0.00055EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.14 views

CVE-2021-47873 VestaCP < 0.9.8-25 - Stored Cross-Site Scripting

VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the 'vinterface' parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payload...

7.2CVSS0.00055EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/21 5:27 p.m.3 views

EUVD-2026-3630

VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the 'vinterface' parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payload...

7.2CVSS5AI score0.00055EPSS
Exploits0References5
OSV
OSV
added 2018/05/09 8:29 p.m.0 views

CVE-2017-14477

In the MMM::Agent::Helpers::Network::addip function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1 for FreeBSD, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An...

9.8CVSS6AI score
Exploits0References1
NVD
NVD
added 2018/05/09 8:29 p.m.11 views

CVE-2017-14476

In the MMM::Agent::Helpers::Network::addip function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1 for Solaris, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An...

10CVSS9.8AI score0.08861EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.1 views

PT-2018-5670 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

10CVSS9.8AI score0.08861EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.1 views

PT-2018-5672 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

10CVSS9.8AI score0.08861EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.3 views

PT-2018-5671 · Mysql Server · Mysql Multi-Master Replication Manager (Mmm) Mmm Agentd

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

10CVSS9.7AI score0.08861EPSS
Exploits2References3
Rows per page
Query Builder