Verydows

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Verydows records in CISA KEV

No Verydows vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Verydows 7 records HIGH

Records

7 records

TI-2020-14548 CVE-2020-23363 · GHSA-wmq2-h2mq-p97v

Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions…

HIGH 73

Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code via a crafted script.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00378 Published 2023-05-09 No fix listed CWE-352

TI-2023-28464 CVE-2023-51949 · GHSA-3836-7r6q-99c9

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 71

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00286 Published 2024-01-12 No fix listed CWE-352

TI-2019-05450 CVE-2019-7737 · GHSA-jh42-wpr5-4gj4

A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via…

LOW 39

A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2019-02-11 No fix listed CWE-352

TI-2022-10884 CVE-2022-28059 · GHSA-jrp8-rcj4-qwj2

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.

LOW 38

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01224 Published 2022-04-26 No fix listed CWE-22

TI-2022-10883 CVE-2022-28058 · GHSA-qr34-62c5-85qp

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.

LOW 38

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01224 Published 2022-04-26 No fix listed CWE-22

TI-2019-06005 CVE-2019-8363 · GHSA-4r6j-p6gq-79w6

Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.

LOW 29

Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-02-16 No fix listed CWE-79

TI-2019-05463 CVE-2019-7753 · GHSA-hj7m-w29g-fgx3

Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.

LOW 29

Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-02-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	5
Medium	2
Low	0
No CVSS	0