4 matches found
CVE-2024-23827 Nginx-UI arbitrary file write through the Import Certificate feature
Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the...
9.8CVSS7.7AI score0.00699EPSS
SaveExploits0References1
CVE-2018-15510
Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...
6.1CVSS6.1AI score0.00631EPSS
SaveExploits0References1
20