CVE-2019-18419

A cross-site scripting XSS vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2019-18418

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management...

CVE-2019-18419

The provided connected records confirm CVE-2019-18419 is a cross-site scripting (XSS) flaw in ClonOS WEB control panel 19.09, specifically in index.php with the lang parameter. Root cause is described in CNVD as lack of proper validation of client-side data, enabling injection of arbitrary script...

CVE-2019-18419

A cross-site scripting XSS vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2019-15402

Name of the Vulnerable Software and Affected Versions ClonOS WEB control panel version 19.09 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the "index.php" file. Recommendations For ClonOS WEB control panel version...

CVE-2019-18419: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2019-18418: Session Fixation

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management...

PT-2019-15401

Name of the Vulnerable Software and Affected Versions ClonOS WEB control panel version 19.09 Description The issue allows remote attackers to gain full access via change password requests due to the lack of session management in the clonos.php file. Recommendations For ClonOS WEB control panel...