Monitorr

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Monitorr records in CISA KEV

No Monitorr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Monitorr 5 records HIGH

Records

5 records in Monitorr · all components

TI-2020-17423 CVE-2020-28871 · GHSA-pcjf-xrw4-4cc2

Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to…

HIGH 84

Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.85901 Published 2021-02-10 No fix listed CWE-434

TI-2023-11768 CVE-2023-26775 · GHSA-fxjr-wp58-m6x4

File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute…

HIGH 65

File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.49367 Published 2023-04-04 No fix listed CWE-434

TI-2020-17424 CVE-2020-28872 · GHSA-2623-9jvf-x9v2

An authorization bypass vulnerability in Monitorr v1.7.6m in…

MEDIUM 48

An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03346 Published 2021-04-12 No fix listed CWE-863

TI-2025-06422 CVE-2025-7060 · GHSA-988v-c5fj-9c75

Monitorr Installer mkdbajax.php input validation

MEDIUM 44

A vulnerability was found in Monitorr up to 1.7.6m.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00519 Published 2025-07-04 No fix listed CWE-20

TI-2023-11769 CVE-2023-26776 · GHSA-vf58-526w-4qf9

Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to…

LOW 30

Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01179 Published 2023-04-04 No fix listed CWE-79

Open these records in search →

Critical	2
High	1
Medium	1
Low	1
No CVSS	0