Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-5378

Stored XSS in SmodBIP and MegaBIP

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Megabip Smod
Products
Megabip Smodbip
CVE-2024-1659

Arbitrary File Upload in MegaBIP

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server (including a PHP code file) without an authentication. This issue affects MegaBIP software versions through 5.10.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Megabip
Products
Megabip
CVE-2024-1577

Remote Code Execution in MegaBIP

Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2.

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed
Vendors
Megabip
Products
Megabip
CVE-2024-1576

SQL Injection in MegaBIP

SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Megabip
Products
Megabip