Vendors / Onekeyadmin Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Onekeyadmin records in CISA KEV No Onekeyadmin vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00935 · Published 2023-03-06 · No fix listed CWE-434
Priority HIGH 80
onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00606 · Published 2023-03-09 · No fix listed CWE-862
Priority HIGH 72
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00666 · Published 2023-03-08 · No fix listed CWE-552
Priority HIGH 72
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00596 · Published 2023-03-09 · No fix listed CWE-552
Priority MEDIUM 58
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00384 · Published 2023-03-08 · No fix listed CWE-79
Priority MEDIUM 58
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00384 · Published 2023-03-08 · No fix listed CWE-79
Priority MEDIUM 55
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00457 · Published 2023-03-07 · No fix listed CWE-79
Priority LOW 24
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00334 · Published 2023-03-16 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 2 4 0 0
THREATIST.IORead the docs