TI-2023-03341 CVE-2023-3579 · GHSA-p7jq-h985-46gc
HadSky User cross-site request forgery
Priority HIGH 71
A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8.
Hadsky
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Hadsky records in CISA KEVNo Hadsky vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2024-20383 CVE-2024-30886 · GHSA-3cjj-693r-8cc3
A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter.
TI-2023-01580 CVE-2023-1684 · GHSA-wfp4-6h74-29hv
HadSky unrestricted upload
Priority MEDIUM 44
A vulnerability was found in HadSky 7.7.16.
TI-2023-25005 CVE-2023-46428 · GHSA-p6pf-jrm9-f4x6
An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.
Priority MEDIUM 42
An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.
TI-2023-01581 CVE-2023-1685 · GHSA-9vj3-657p-m834
HadSky Installation Interface index.php command injection
Priority LOW 38
A vulnerability was found in HadSky up to 7.11.8.
TI-2024-20382 CVE-2024-30885 · GHSA-r3qr-6c5q-pr77
Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote…
Priority LOW 28
Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component .