31 matches found
CVE-2019-18419
The provided connected records confirm CVE-2019-18419 is a cross-site scripting (XSS) flaw in ClonOS WEB control panel 19.09, specifically in index.php with the lang parameter. Root cause is described in CNVD as lack of proper validation of client-side data, enabling injection of arbitrary script...
CVE-2019-18419: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2019-18418: Session Fixation
clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management...
ClonOS WEB control panel authorization issue vulnerability
ClonOS is an open source platform based on FreeBSD. The platform is mainly used for the creation and management of virtual environments. web control panel is one of the web-based ClonOS control panel. An authorization issue vulnerability exists in the clonos.php file in ClonOS WEB control panel...
ClonOS WEB control panel SQL Injection Vulnerability
ClonOS is an open source platform based on FreeBSD. The platform is mainly used for the creation and management of virtual environments. web control panel is one of the web-based ClonOS control panel. An SQL injection vulnerability exists in the clonos.php file in versions of WEB control panel...
CVE-2019-15571
The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php...
CVE-2019-15571
The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php...
Sql injection
The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php...
CVE-2019-15571
The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php...
CVE-2019-15571
CVE-2019-15571: SQL injection in ClonOS WEB control panel (clonos.php) before 2019-04-30. Affects web component; CVSS indicates NETWORK access, no authentication, and impacts on confidentiality, integrity, and availability (all PARTIAL/HIGH for CVSS3). No remediation details are provided in the s...