Login Request a demo
WE
Product
Webuzo
by Softaculous · last CVE Jul 25, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities6Critical1High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webuzo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-24621
9.8
1%
Jul 25
Softaculous Webuzo Authentication Bypass
Affected: 3.2.1 through 4.2.9
CVE-2024-24622
8.8
2%
Jul 25
Softaculous Webuzo Password Reset Command Injection
Affected: 3.2.1
CVE-2024-24623
8.8
2%
Jul 25
Softaculous Webuzo FTP Management Command Injection
Affected: 3.2.1
CVE-2013-6043
–
3%
Dec 27
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which…
Affected: through 2.1.3; 2.1.0; 2.1.1; 2.1.2
CVE-2013-6041
–
4%
Dec 27
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action
Affected: through 2.1.3; 2.1.0; 2.1.1; 2.1.2
CVE-2013-6042
–
2%
Nov 19
Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web…
Affected: through 2.1.3; 1.0; 1.1; 1.2; 1.3; 1.4; +15 more
Showing 6