Lucene search
+L

5 matches found

Mend
Mend
•added 2025/02/27 5:00 p.m.•4 views

CVE-2025-1742

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...

6.1CVSS0.00527EPSS
SaveExploits1References5
Mend
Mend
•added 2025/02/12 5:31 p.m.•5 views

CVE-2025-1213

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

5.4CVSS0.00516EPSS
SaveExploits1References4
Mend
Mend
•added 2025/02/12 7:00 a.m.•5 views

CVE-2025-1184

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS0.00517EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/02/12 12:00 a.m.•8 views

PT-2025-6854

Name of the Vulnerable Software and Affected Versions pihome-shc PiHome version 1.77 Description A problem has been found in the /index.php file, affecting some unknown functionality. The issue is related to the manipulation of the $ SERVER'PHP SELF' argument, which leads to cross site scripting...

5.4CVSS0.00516EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•6 views

CVE-2025-1184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS5.5AI score0.00517EPSS
SaveExploits1References1
Rows per page
Query Builder