Monox Security Vulnerabilities and Issues — Monox CVE List

Lucene search

MonoMonox

4 matches found

CVE•added 2020/04/29 9:15 p.m.•44 views

CVE-2020-12471

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.

9.8CVSS9.8AI score0.0325EPSS

CVE•added 2020/04/29 8:15 p.m.•38 views

CVE-2020-12473

MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program.

9CVSS7.2AI score0.00465EPSS

CVE•added 2020/04/29 9:15 p.m.•35 views

CVE-2020-12470

MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.

7.2CVSS7.3AI score0.00443EPSS

CVE•added 2020/04/29 8:15 p.m.•35 views

CVE-2020-12472

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.

5.4CVSS5.2AI score0.00281EPSS