Saltos RhinOS 3.0 1190
Approved changes feed: RSS · Atom
cpe:2.3:a:saltos:rhinos:3.0:1190:*:*:*:*:*:*
part: a version: 3.0 update: 1190
| Vendor | Saltos (b29fdf4a-9dcc-53ab-91da-6d6ef4fd0bc0) |
|---|---|
| Product | Rhinos (34265a46-9ba5-53bb-976a-899708a4537f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5409 |
vulnerable | 2026-06-08 06:56:15.843245 |
Cross-site Scripting vulnerability in RhinOS from SaltOS
HIGH (7.1)
RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to a victim to obtain their session details.
Published: 2024-05-27T12:17:41.451Z
Updated: 2024-08-01T21:11:12.697Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5408 |
vulnerable | 2026-06-08 06:56:15.842577 |
Cross-site Scripting vulnerability in RhinOS from SaltOS
HIGH (7.1)
Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL.
Published: 2024-05-27T12:16:52.088Z
Updated: 2024-08-01T21:11:12.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5407 |
vulnerable | 2026-06-08 06:56:15.841956 |
Code Injection vulnerability in RhinOS from SaltOS
CRITICAL (10)
A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure.
Published: 2024-05-27T12:13:55.114Z
Updated: 2024-08-01T21:11:12.773Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.