Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: LXCenter Clear all filters
TI-2012-05445 CVE-2012-10022 · GHSA-6xj5-fx7c-xvcj

Kloxo <= 6.1.12 Local Privilege Escalation

Priority HIGH 72

Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00474 Published 2025-08-01 No fix listed CWE-269
TI-2014-08422 CVE-2014-125123 · GHSA-88g5-2w2f-r74m

Kloxo < 6.1.12 Unauthenticated SQL Injection RCE

Priority HIGH 82

An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01183 Published 2025-07-31 Fixed in 6.1.12 CWE-89