Vulnerabilities

TI-2023-30221 CVE-2023-53938 · GHSA-8rr6-65c8-jjwx

RockMongo 1.1.7 Stored Cross-Site Scripting Vulnerability via Multiple Parameters

MEDIUM 56

RockMongo 1.1.7 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple unencoded input parameters.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00247 Published 2025-12-18 No fix listed CWE-79

TI-2013-04435 CVE-2013-5107 · GHSA-gwxw-3qw5-mfrx

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers…

LOW 26

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2013-12-14 No fix listed CWE-22

TI-2013-04436 CVE-2013-5108 · GHSA-cxqc-jm2g-f2cf

Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) db parameter on the login page or (2) userna…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0145 Published 2013-12-05 No fix listed CWE-79

Vulnerabilities

Filters

RockMongo 1.1.7 Stored Cross-Site Scripting Vulnerability via Multiple Parameters

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5…