Hundred Plus Eip Plus
2 CVEs affecting Hundred Plus Eip Plus. Latest disclosed: 2025-11-10. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12866 | Critical | 9.8 | 2025-11-10 | EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the… |
CVE-2025-12867 | High | 7.2 | 2025-11-10 | EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors… |