Read the docs

LXCenter

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

LXCenter records in CISA KEV

No LXCenter vulnerabilities are listed in CISA KEV.

Records

2 records

Priority HIGH 82

An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01183 Published 2025-07-31 Fixed in 6.1.12 CWE-89
TI-2012-05445 CVE-2012-10022 · GHSA-6xj5-fx7c-xvcj

Kloxo <= 6.1.12 Local Privilege Escalation

Priority HIGH 72

Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00474 Published 2025-08-01 No fix listed CWE-269
Open these records in search →