Lucene search
+L
XinuosOpenserver

3 matches found

CVE
CVE
added 2004/05/05 4:0 a.m.854 views

CVE-2004-0230

Technical details beyond the public description are not provided in the supplied documents. CVE-2004-0230 describes a TCP sequence-number guessing/RST-injection denial-of-service under large window size; no remediation details are given here.

5CVSS9.1AI score0.80286EPSS
Save
CVE
CVE
added 2020/12/18 2:27 p.m.230 views

CVE-2020-25494

CVE-2020-25494 affects Xinuos OpenServer v5/v6. The vulnerability is in the CGI component cgi-bin/printbook (parameters outputform and toclevels), enabling shell metacharacter input and arbitrary command execution. Exploitation details in public sources confirm OS command injection with remote, u...

9.8CVSS9.8AI score0.39193EPSS
SaveIn wildWeb
CVE
CVE
added 2020/12/18 2:28 p.m.129 views

CVE-2020-25495

Xinuo (formerly SCO) Openserver v5/v6 is affected by a reflected XSS in the web interface, exploitable via the 'section' parameter due to inadequate input validation. Impact: arbitrary script execution and potential data leakage for users who load the affected pages. Remediation: apply the latest...

6.1CVSS6AI score0.08981EPSS
Save