Filtered by vendor Clonos Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-18419 1 Clonos 1 Clonos 2024-11-21 6.1 Medium
A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
CVE-2019-18418 1 Clonos 1 Clonos 2024-11-21 9.8 Critical
clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.