Read the docs

softaculous

Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

softaculous records in CISA KEV

No softaculous vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webuzo 6 records MEDIUM Backuply 3 records MEDIUM Speedycache 3 records LOW Ampps 1 record HIGH Softaculous 1 record LOW Whmcs Reseller Module 1 record MEDIUM

Records

6 records in Webuzo · all components

TI-2024-16212 CVE-2024-24621 · GHSA-3r6p-fq38-2gpr

Softaculous Webuzo Authentication Bypass

Priority MEDIUM 51

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01157 Published 2024-07-25 No fix listed CWE-697
TI-2024-16214 CVE-2024-24623 · GHSA-96rx-8rv9-v6vx

Softaculous Webuzo FTP Management Command Injection

Priority MEDIUM 44

Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01889 Published 2024-07-25 No fix listed CWE-78
TI-2024-16213 CVE-2024-24622 · GHSA-38v3-r7mm-56j2

Softaculous Webuzo Password Reset Command Injection

Priority MEDIUM 44

Softaculous Webuzo contains a command injection in the password reset functionality.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01889 Published 2024-07-25 No fix listed CWE-78
TI-2013-05153 CVE-2013-6043 · GHSA-32mh-8hmm-h86p

The login function in Softaculous Webuzo before 2.1.4 provides different error messages…

Priority LOW 28

The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernam…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02889 Published 2014-12-27 No fix listed CWE-200
Open these records in search →