Lucene search
+L

15515 matches found

RedhatCVE
RedhatCVE
•added 2025/08/22 12:22 a.m.•30 views

CVE-2025-51990

XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP...

4.8CVSS6.1AI score0.00498EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/08/22 12:00 a.m.•34 views

CVE-2025-50858

Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...

0.0024EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•17 views

MCSManager Panel 安全漏洞

MCSManager Panel is an open source game server administration panel from MCSManager. A security vulnerability exists in MCSManager Panel version 10.5.3, which stems from a daemon running as root by default and sensitive data being readable by all users, which may result in elevated privileges...

5.3CVSS6.8AI score0.00248EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•19 views

PT-2025-34485

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The List MySQL Databases function in Easy Hosting Control Panel EHCP is susceptible to a reflected cross-site scripting issue. Authenticated attackers can potentially execute...

6.4CVSS7.2AI score0.0024EPSS
SaveExploits3References9
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•20 views

PT-2025-34486

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel EHCP version 20.04.1.b Description A reflected Cross-Site Scripting issue exists in the Change Template function. Authenticated attackers can execute arbitrary JavaScript code through the template parameter. The issu...

6.1CVSS7.1AI score0.00292EPSS
SaveExploits3References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•6 views

CVE-2025-50858: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...

6.1CVSS6.3AI score0.0024EPSS
SaveExploits3References1
CVE
CVE
•added 2025/08/22 12:00 a.m.•42 views

CVE-2025-50859

The Easy Hosting Control Panel (EHCP) version 20.04.1.b is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw within the Change Template function. The root cause is the improper neutralization of input in the template parameter, which allows authenticated attackers to execute arbitrary Jav...

6.1CVSS6.8AI score0.00292EPSS
SaveExploits3References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/22 12:00 a.m.•7 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

6.8AI score0.00292EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•20 views

EHCP Easy Hosting Control Panel 安全漏洞

EHCP Easy Hosting Control Panel is an open source web hosting control panel from EHCP. A security vulnerability exists in EHCP Easy Hosting Control Panel version 20.04.1.b. The vulnerability stems from a reflective cross-site scripting vulnerability in the action parameter of the List MySQL...

6.1CVSS6AI score0.0024EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2025/08/22 12:00 a.m.•40 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

0.00292EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•7 views

CVE-2025-50859: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

6.1CVSS6.3AI score0.00292EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•24 views

EHCP Easy Hosting Control Panel 安全漏洞

EHCP Easy Hosting Control Panel is an open source web hosting control panel from EHCP. A security vulnerability exists in EHCP Easy Hosting Control Panel version 20.04.1.b. The vulnerability stems from a reflected cross-site scripting vulnerability in the template parameter of the Change Template...

6.1CVSS6.1AI score0.00292EPSS
SaveExploits3References4
NVD
NVD
•added 2025/08/21 3:15 p.m.•25 views

CVE-2025-50860

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

5.4CVSS0.00234EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/08/21 12:26 a.m.•30 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS8.6AI score0.00258EPSS
SaveExploits2References1
CVE
CVE
•added 2025/08/21 12:00 a.m.•40 views

CVE-2025-50860

A SQL Injection vulnerability exists in the listdomains function of the Easy Hosting Control Panel (EHCP) version 20.04.1.b . This flaw allows authenticated attackers to access or manipulate database contents by leveraging the arananalan POST parameter. No information regarding a patch or newer v...

5.4CVSS8.2AI score0.00234EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
•added 2025/08/21 12:00 a.m.•14 views

EHCP Easy Hosting Control Panel 安全漏洞

EHCP Easy Hosting Control Panel is an open source web hosting control panel from EHCP. A security vulnerability exists in EHCP Easy Hosting Control Panel version 20.04.1.b. The vulnerability stems from a SQL injection in the listdomains function, which could lead to database content access or...

5.4CVSS7.5AI score0.00234EPSS
SaveExploits2References3
Packet Storm
Packet Storm
•added 2025/08/21 12:00 a.m.•122 views

📄 Easy Hosting Control Panel 20.04.1.b Cross Site Scripting

Easy Hosting Control Panel version 20.04.1.b suffers from a cross site scripting vulnerability in the ftpusername parameter. This enables the attacker to inject malicious JavaScript payloads, leading to session hijacking, redirection to malicious sites, defacement, or other actions performed in t...

6.3CVSS6.3AI score0.00198EPSS
SaveExploits2
Vulnrichment
Vulnrichment
•added 2025/08/21 12:00 a.m.•7 views

CVE-2025-50860

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

8.2AI score0.00234EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2025/08/21 12:00 a.m.•19 views

PT-2025-34226

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: A SQL Injection issue exists in the listdomains function of Easy Hosting Control Panel EHCP. Authenticated attackers can potentially access or manipulate database contents via the...

5.4CVSS8.3AI score0.00234EPSS
SaveExploits2References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•5 views

CVE-2025-50860: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

5.4CVSS5.8AI score0.00234EPSS
SaveExploits2References1
Rows per page
Query Builder