Vulnerabilities

TI-2022-09014 CVE-2022-25322 · GHSA-qm9c-x9hh-pr9m

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.

MEDIUM 54

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09578 Published 2022-02-18 No fix listed CWE-89

TI-2022-09015 CVE-2022-25323 · GHSA-qhq5-7rhv-hh2q

LOW 33

ZEROF Web Server 2.0 allows /admin.back XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03231 Published 2022-02-18 No fix listed CWE-79

TI-2021-10715 CVE-2021-30175 · GHSA-4jx4-gmpg-qw4c

MEDIUM 53

ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08548 Published 2021-04-13 No fix listed CWE-89