Angry-Frog Xavier
2 CVEs affecting Angry-Frog Xavier. Latest disclosed: 2019-07-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15949 | High | 7.2 | 2017-10-28 | Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php. |
CVE-2019-14228 | Medium | 6.1 | 2019-07-26 | Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess… |