cve.bz

webhost automation helm control panel vulnerabilities, newest first

Filter
  1. –CVE-2004-1499EPSS 1.8%

    Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.

  2. –CVE-2004-1498EPSS 1.2%

    SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.