Lucene search
+L

5 matches found

NVD
NVD
•added 2025/12/24 8:15 p.m.•31 views

CVE-2019-25234

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious...

5.3CVSS0.00172EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/12/24 7:27 p.m.•6 views

CVE-2019-25234 Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious...

5.3CVSS6.3AI score0.00172EPSS
SaveExploits1References3
CVE
CVE
•added 2025/12/24 7:27 p.m.•23 views

CVE-2019-25234

CVE-2019-25234 affects Carlo Gavazzi SmartHouse Webapp 6.5.33. The connected documents confirm multiple vulnerabilities: cross-site request forgery (CSRF) and cross-site scripting (XSS) that could allow attackers to perform unauthorized actions by tricking logged-in users into visiting malicious ...

5.3CVSS6.3AI score0.00172EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/12/24 7:27 p.m.•49 views

CVE-2019-25234 Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious...

5.3CVSS0.00172EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•2 views

CVE-2019-25234: Improper Neutralization of Input During Web Page Generation

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious...

5.3CVSS5.7AI score0.00172EPSS
SaveExploits1References1
Rows per page
Query Builder