clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management...
9.8CVSS7.4AI score0.04003EPSS
SaveExploits4References2
OSV•added 2019/10/24 7:15 p.m.•3 views
CVE-2019-18419
A cross-site scripting XSS vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
