Lucene search

K

Web Server Security Vulnerabilities - February

cve
cve

CVE-2021-30175

ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.

9.8CVSS

9.9AI Score

0.075EPSS

2021-04-13 02:15 PM
27
cve
cve

CVE-2022-25322

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.

9.8CVSS

9.7AI Score

0.002EPSS

2022-02-18 05:15 PM
84
cve
cve

CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS.

6.1CVSS

6.2AI Score

0.001EPSS

2022-02-18 05:15 PM
114