Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Very High
CVE-2020-28871
Disclosure Date: February 10, 2021 (last updated February 22, 2025)
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.
2
Attacker Value
Low
CVE-2020-28872
Disclosure Date: April 12, 2021 (last updated February 22, 2025)
An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials.
1
Attacker Value
Unknown
CVE-2024-0713
Disclosure Date: January 19, 2024 (last updated April 25, 2024)
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28871. Reason: This candidate is a reservation duplicate of CVE-2020-28871. Notes: All CVE users should reference CVE-2020-28871 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
0
Attacker Value
Unknown
CVE-2023-26776
Disclosure Date: April 04, 2023 (last updated January 27, 2024)
Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file.
0
Attacker Value
Unknown
CVE-2023-26775
Disclosure Date: April 04, 2023 (last updated January 27, 2024)
File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint.
0
