GCVE - cpe:2.3:a:mono:monox:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mono:monox:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mono (`3bbce7e0-7556-583d-80fe-8a58f0664762`)
Product	Monox (`11e6542a-ecfa-5a75-9ce6-64fb7615af4c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-12473`	vulnerable	2026-06-08 05:17:58.238408	Details available MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program. Published: 2020-04-29T19:57:55.000Z Updated: 2024-08-04T11:56:52.080Z Open on db.gcve.eu Reference links https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20ConvertVideo	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12472`	vulnerable	2026-06-08 05:17:58.237989	Details available MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. Published: 2020-04-29T19:58:06.000Z Updated: 2024-08-04T11:56:52.077Z Open on db.gcve.eu Reference links https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Multiple%20Cross-Site-Scripting	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12471`	vulnerable	2026-06-08 05:17:58.237681	Details available MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler. Published: 2020-04-29T19:58:15.000Z Updated: 2024-08-04T11:56:52.057Z Open on db.gcve.eu Reference links https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Remote%20Code%20Execution%20via%20Insecure%20Deserialization	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12470`	vulnerable	2026-06-08 05:17:58.237134	Details available MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. Published: 2020-04-29T19:58:23.000Z Updated: 2024-08-04T11:56:52.070Z Open on db.gcve.eu Reference links https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20Template%20Modification	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.