Xiaohuanxiong Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xiaohuanxiong Project records in CISA KEV

No Xiaohuanxiong Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-09664 CVE-2022-26268 · GHSA-7hcp-ff5q-84p9

MEDIUM 44

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00956 Published 2022-03-28 No fix listed CWE-89

TI-2021-19551 CVE-2021-43737 · GHSA-72w5-pmm6-jwhp

LOW 29

An issus was discovered in xiaohuanxiong CMS 5.0.17.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00411 Published 2022-03-23 No fix listed CWE-352