Vulnerabilities

TI-2021-18222 CVE-2021-41421 · GHSA-rcx6-j954-7rj5

A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated…

LOW 23

A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2022-06-16 No fix listed CWE-434

TI-2021-18221 CVE-2021-41420 · GHSA-4x7x-8w85-w9q5

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for…

LOW 26

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00786 Published 2022-06-16 No fix listed CWE-79

TI-2021-16750 CVE-2021-39402 · GHSA-mxxw-p9pq-2vhx

MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin…

LOW 34

MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01329 Published 2021-09-20 No fix listed CWE-94

Vulnerabilities

Filters

A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated…

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for…

MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin…