CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

NVD•added 2026/04/02 2:16 p.m.•1 views

CVE-2026-5332

A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument param leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available...

6.1CVSS0.00031EPSS

Exploits0References4

ATTACKERKB•added 2026/04/02 1:15 p.m.•1 views

CVE-2026-5332

5.1CVSS4.4AI score0.00031EPSS

Exploits0References4Affected Software1

Cvelist•added 2026/04/02 1:15 p.m.•17 views

CVE-2026-5332 Xiaopi Panel WAF Firewall demo.php cross site scripting

5.1CVSS0.00031EPSS

Exploits0References4

CVE•added 2026/04/02 1:15 p.m.•6 views

CVE-2026-5332

A vulnerability is identified in Xiaopi Panel 1.0.0 affecting the WAF Firewall component, specifically the /demo.php file. The issue arises from manipulation of the param argument, enabling cross-site scripting. Remote exploitation is possible, and an exploit is publicly available. The vendor was...

6.1CVSS4.4AI score0.00031EPSS

Exploits0References4Affected Software1

Positive Technologies•added 2026/04/02 12:0 a.m.•2 views

PT-2026-29739

5.1CVSS4.4AI score0.00031EPSS

Exploits0References5

RedhatCVE•added 2026/02/09 1:33 a.m.•7 views

CVE-2026-2122

A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the component WAF Firewall. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public...

9.8CVSS6.3AI score0.00039EPSS

Exploits0References1