CVE-2025-1184

CVE-2025-1184 — pihome-shc PiHome 1.77 involves an SQL injection in the endpoint “/ajax.php?Ajax=GetModal_MQTTEdit” via the id parameter. Multiple connected sources confirm remote exploitation potential and public disclosure. The vulnerability affects an unknown functionality of that file, with C...

CVE-2025-1184

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

PiHome 注入漏洞

PiHome is a home automation system by the individual developer of PiHomeHVAC. An injection vulnerability exists in PiHome version 2.0, which originates from /ajax.php?Ajax=GetModalSensorGraph contains a SQL injection vulnerability...

PiHome 安全漏洞

PiHome is a home automation system from the individual developers of PiHomeHVAC. A security vulnerability exists in PiHome version 2.0 that stems from /useraccounts.php?uid contains a missing authorization vulnerability...

PiHome SQL注入漏洞

PiHome is a home automation system by the individual developer of PiHomeHVAC. A SQL injection vulnerability exists in PiHome version 1.77, which stems from the id parameter of /ajax.php?Ajax=GetModalMQTTEdit contains a SQL injection vulnerability...

PT-2025-6855 · Unknown · Pihome-Shc Pihome

Name of the Vulnerable Software and Affected Versions: pihome-shc PiHome version 2.0 Description: A critical vulnerability has been found in pihome-shc PiHome, affecting an unknown part of the file /user accounts.php?uid of the component Role-Based Access Control. The manipulation leads to missin...

PT-2025-6854

Name of the Vulnerable Software and Affected Versions pihome-shc PiHome version 1.77 Description A problem has been found in the /index.php file, affecting some unknown functionality. The issue is related to the manipulation of the $ SERVER'PHP SELF' argument, which leads to cross site scripting...

CVE-2025-1185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1214: Missing Authorization

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /useraccounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-1213: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

PT-2025-6449 · Unknown · Pihome-Shc Pihome

Name of the Vulnerable Software and Affected Versions: pihome-shc PiHome version 1.77 Description: A critical issue affects some unknown functionality of the file "/ajax.php?Ajax=GetModal MQTTEdit". The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. T...

PT-2025-6056 · Unknown · Pihome-Shc Pihome

Name of the Vulnerable Software and Affected Versions: pihome-shc PiHome version 2.0 Description: A critical issue has been found in pihome-shc PiHome, affecting an unknown part of the file "/ajax.php?Ajax=GetModal Sensor Graph". The manipulation leads to SQL injection, and it is possible to...