Login Request a demo
IN
Product
Indexhibit
by Indexhibit · last CVE Aug 30, 2021
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 5Low 0
Severity
All severities8Critical1High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Indexhibit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-16314
9.8
39%
Sep 14
Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2
Affected: 2.1.5
CVE-2020-18121
8.8
1%
Aug 30
A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell
Affected: 2.1.5
CVE-2019-8954
8.8
3%
Feb 20
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system…
Affected: 2.1.5
CVE-2020-18127
6.5
1%
Aug 30
An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files
Affected: 2.1.5
CVE-2020-18123
6.5
0%
Aug 30
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts
Affected: 2.1.5
CVE-2020-18125
6.1
1%
Aug 30
A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML
Affected: 2.1.5
CVE-2020-18124
5.7
0%
Aug 30
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords
Affected: 2.1.5
CVE-2020-18126
5.4
1%
Aug 30
Multiple stored cross-site scripting (XSS) vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML
Affected: 2.1.5
Showing 8