Lucene search
OpenelecOpenelec*
2 matches found
CVE-2008-6025
Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj parameter.
6.8CVSS7.3AI score0.01516EPSS
Web
CVE-2016-2230
OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session.
10CVSS9.5AI score0.01635EPSS