Vulnerabilities (CVE)

Filtered by vendor Monitorr Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-26776 1 Monitorr 1 Monitorr 2024-01-26 N/A 6.1 MEDIUM
Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file.
CVE-2023-26775 1 Monitorr 1 Monitorr 2024-01-26 N/A 7.8 HIGH
File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint.
CVE-2020-28872 1 Monitorr 1 Monitorr 2024-01-26 7.5 HIGH 9.8 CRITICAL
An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials.
CVE-2020-28871 1 Monitorr 1 Monitorr 2024-01-26 7.5 HIGH 9.8 CRITICAL
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.