Approved changes feed: RSS · Atom

cpe:2.3:a:wpn-xm:serverstack:0.8.6:*:*:*:*:*:*:*

part: a version: 0.8.6 update: *

VendorWpn Xm (96074649-0ca7-58fe-9fbc-04db46905aaf)
ProductServerstack (4c1476b1-7eb8-528d-b2e6-fc2701fe40cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4591 vulnerable 2026-06-08 06:16:13.519347 Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack
HIGH (7.5)
A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion (LFI) via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the loading of a PHP file on the server, leading to a critical webshell exploit.
Published: 2023-11-03T11:01:55.931Z
Updated: 2024-09-05T15:09:56.489Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.