TI-2017-07187 CVE-2017-9807 · GHSA-829m-7f46-r3j5
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices.
Priority MEDIUM 50
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices.
Openwebif Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Openwebif Project records in CISA KEVNo Openwebif Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2017-06761 CVE-2017-9333 · GHSA-xjpr-5xvx-vr58
OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the…
Priority MEDIUM 42
OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse packag…
TI-2018-14389 CVE-2018-20332 · GHSA-8484-vqj3-mhrm
An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based…
Priority LOW 37
An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices.
TI-2021-15796 CVE-2021-38113 · GHSA-346p-9xff-4p8r
In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7…
Priority LOW 25
In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i.e., bouqueteditor/api/addbouquet?name=) leads to Stored XSS.