TI-2018-13277 CVE-2018-18761 · GHSA-xwm8-c743-c377
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
Priority MEDIUM 59
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
SaltOS
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
SaltOS records in CISA KEVNo SaltOS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
Priority MEDIUM 50
A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm.
TI-2018-13279 CVE-2018-18763 · GHSA-jxf2-84cf-jfqp
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
Priority MEDIUM 48
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
TI-2018-13278 CVE-2018-18762 · GHSA-qwxx-r7ph-8m3q
SaltOS 3.1 r8126 contains a database download vulnerability.
Priority LOW 38
SaltOS 3.1 r8126 contains a database download vulnerability.
TI-2018-13276 CVE-2018-18760 · GHSA-7v25-cx6v-gf9w
RhinOS 3.0 build 1190 allows CSRF.
Priority LOW 34
RhinOS 3.0 build 1190 allows CSRF.
Priority LOW 31
RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php.
Priority LOW 31
Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm.