Saltos Rhinos
4 CVEs affecting Saltos Rhinos. Latest disclosed: 2024-05-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5407 | Critical | 10.0 | 2024-05-27 | A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote… |
CVE-2024-5409 | High | 7.1 | 2024-05-27 | RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to… |
CVE-2024-5408 | High | 7.1 | 2024-05-27 | Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to… |
CVE-2018-18760 | Medium | 6.5 | 2018-11-16 | RhinOS 3.0 build 1190 allows CSRF. |