Vulnerabilities

TI-2019-10590 CVE-2019-14228 · GHSA-r9rv-3x3p-cg37

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the…

LOW 28

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0043 Published 2019-07-26 No fix listed CWE-352

TI-2017-11680 CVE-2017-15949 · GHSA-3qgc-gmq8-h85r

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to…

LOW 33

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2017-10-28 No fix listed CWE-89

Vulnerabilities

Filters

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the…

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to…