Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/02/09 7:23 p.m.•19 views

CVE-2026-2145

A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely...

5.4CVSS3.6AI score0.00281EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/08 9:15 a.m.•23 views

CVE-2026-2145

A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely...

5.4CVSS0.00281EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/02/08 9:02 a.m.•11 views

CVE-2026-2145

A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely...

5.1CVSS3.4AI score0.00281EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2026/02/08 9:02 a.m.•19 views

CVE-2026-2145 cym1102 nginxWebUI Web Management check cross site scripting

A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely...

5.1CVSS4.2AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•5 views

CVE-2026-2145: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely...

5.4CVSS3.5AI score0.00281EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•34 views

PT-2026-6971

Name of the Vulnerable Software and Affected Versions cym1102 nginxWebUI versions through 4.3.7 Description A cross site scripting issue exists in cym1102 nginxWebUI. The issue is related to manipulation of the nginxDir argument within an unknown function of the file /adminPage/conf/check, part o...

5.1CVSS4.5AI score0.00281EPSS
SaveExploits1References8
Rows per page
Query Builder