Vulnerabilities

TI-2024-20383 CVE-2024-30886 · GHSA-3cjj-693r-8cc3

A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00325 Published 2024-04-23 No fix listed CWE-79

TI-2024-20382 CVE-2024-30885 · GHSA-r3qr-6c5q-pr77

Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote…

LOW 28

Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component .

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2024-04-11 No fix listed CWE-79

TI-2023-25005 CVE-2023-46428 · GHSA-p6pf-jrm9-f4x6

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.

MEDIUM 42

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01096 Published 2023-11-01 No fix listed CWE-434

TI-2023-03341 CVE-2023-3579 · GHSA-p7jq-h985-46gc

HadSky User cross-site request forgery

HIGH 71

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2023-07-10 No fix listed CWE-352

TI-2023-01581 CVE-2023-1685 · GHSA-9vj3-657p-m834

HadSky Installation Interface index.php command injection

LOW 38

A vulnerability was found in HadSky up to 7.11.8.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04079 Published 2023-03-29 No fix listed CWE-77

TI-2023-01580 CVE-2023-1684 · GHSA-wfp4-6h74-29hv

HadSky unrestricted upload

MEDIUM 44

A vulnerability was found in HadSky 7.7.16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00855 Published 2023-03-29 No fix listed CWE-434

Vulnerabilities

Filters

A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky…

Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote…

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.

HadSky User cross-site request forgery

HadSky Installation Interface index.php command injection

HadSky unrestricted upload