2 matches found
PT-2021-3849 · Phplist · Phplist
Name of the Vulnerable Software and Affected Versions: phplist version 3.5.1 Description: The issue is related to a lack of restrictions on file uploads in the phplist application, which can be exploited by uploading a malicious plugin containing PHP files with certain extensions, such as PHP,...
9.8CVSS9.8AI score0.0289EPSS
SaveExploits1References9
PT-2019-6111 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.6.6 Description: The issue allows remote command execution as root. It requires access to the server as the nagios user or access as the admin user via the web interface. The getprofile.sh script is executed as...
9CVSS8.7AI score0.77741EPSS
SaveExploits13References12
20