CVE-2025-1214 pihome-shc PiHome Role-Based Access Control user_accounts.php authorization

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /useraccounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-1214 pihome-shc PiHome Role-Based Access Control user_accounts.php authorization

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /useraccounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-1214

CVE-2025-1214 affects pihome-shc PiHome 2.0, specifically the Role-Based Access Control component. The vulnerability resides in an issue with the /user_accounts.php?uid endpoint, enabling missing authorization and potentially allowing remote exploitation. Several sources confirm that exploitation...

CVE-2025-1213 pihome-shc PiHome index.php cross site scripting

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

CVE-2025-1213 pihome-shc PiHome index.php cross site scripting

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

CVE-2025-1213

CVE-2025-1213 affects PiHome 1.77. The vulnerability is a cross-site scripting (XSS) in an unknown functionality of /index.php triggered by manipulating the argument $_SERVER['PHP_SELF']. The attack can be launched remotely and the exploit has been disclosed publicly. Concrete details across conn...

CVE-2025-1185

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185

CVE-2025-1185 affects pihome-shc PiHome 2.0. The vulnerability is a SQL injection in an unknown portion of the file /ajax.php?Ajax=GetModal_Sensor_Graph that can be triggered remotely. Multiple connected documents confirm the issue and link it to PiHome 2.0; one PT Security entry also provides a ...

CVE-2025-1184

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184

CVE-2025-1184 — pihome-shc PiHome 1.77 involves an SQL injection in the endpoint “/ajax.php?Ajax=GetModal_MQTTEdit” via the id parameter. Multiple connected sources confirm remote exploitation potential and public disclosure. The vulnerability affects an unknown functionality of that file, with C...

PiHome 安全漏洞

PiHome is a home automation system from the individual developers of PiHomeHVAC. A security vulnerability exists in PiHome version 2.0 that stems from /useraccounts.php?uid contains a missing authorization vulnerability...

PiHome SQL注入漏洞

PiHome is a home automation system by the individual developer of PiHomeHVAC. A SQL injection vulnerability exists in PiHome version 1.77, which stems from the id parameter of /ajax.php?Ajax=GetModalMQTTEdit contains a SQL injection vulnerability...

PiHome 注入漏洞

PiHome is a home automation system by the individual developer of PiHomeHVAC. An injection vulnerability exists in PiHome version 2.0, which originates from /ajax.php?Ajax=GetModalSensorGraph contains a SQL injection vulnerability...

PT-2025-6855 · Unknown · Pihome-Shc Pihome

Name of the Vulnerable Software and Affected Versions: pihome-shc PiHome version 2.0 Description: A critical vulnerability has been found in pihome-shc PiHome, affecting an unknown part of the file /user accounts.php?uid of the component Role-Based Access Control. The manipulation leads to missin...