CVE-2022-25322

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...

CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS...

CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS...

CVE-2022-25322

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...

CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS...

Cross site scripting

ZEROF Web Server 2.0 allows /admin.back XSS...

Sql injection

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...

EUVD-2022-30005

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...

CVE-2022-25322

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...

CVE-2022-25322

CVE-2022-25322 affects ZEROF Web Server 2.0, where the endpoint /HandleEvent is vulnerable to SQL Injection . The NVD/NVD-derived metrics list CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base 7.5 (HIGH);攻击面 is NETWORK with low complexity and no authentication. Connected sources describe explo...

CVE-2022-25323

CVE-2022-25323 affects ZEROF Web Server 2.0, with a cross-site scripting (XSS) vulnerability reachable via the /admin.back endpoint. Public docs identify CWE-79 and CVSS v3.1 base score 6.1 (NETWORK, LOW complexity, UI REQUIRED, changed scope; impact: confidentiality/integrity LOW, availability N...

CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS...

Exploit for SQL Injection in Zerof Web_Server

Public CVE | CVE Number | Produc...

PT-2022-17212

Name of the Vulnerable Software and Affected Versions ZEROF Web Server version 2.0 Description The issue allows for XSS in the /admin.back endpoint. Recommendations For ZEROF Web Server version 2.0, consider restricting access to the /admin.back endpoint until a fix is available...

Drupal 9.2.x < 9.2.13 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.88, 9.2.x prior to 9.2.13, or 9.3.x prior to 9.3.6. It is, therefore, affected by multiple vulnerabilities: - The Quick Edit module does not properly check entity access in some...

ZEROF Web Server SQL注入漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. ZEROF Web Server has a SQL injection vulnerability that allows HandleEvent SQL injection...

ZEROF Web Server跨站脚本漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. ZEROF Web Server has a security vulnerability , there is no information about the vulnerability , please keep...

CVE-2022-25322: Improper Neutralization of Special Elements used in an SQL Command

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...

CVE-2022-25323: Improper Neutralization of Input During Web Page Generation

ZEROF Web Server 2.0 allows /admin.back XSS...

PT-2022-17211

Name of the Vulnerable Software and Affected Versions ZEROF Web Server version 2.0 Description The issue allows for SQL Injection via the /HandleEvent endpoint. Recommendations For ZEROF Web Server version 2.0, consider restricting access to the /HandleEvent endpoint until a patch is available...