Rainbowfishsoftware: Security Vulnerabilities
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
CVSS Score
8.8
EPSS Score
0.005
Published
2021-02-03
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
CVSS Score
6.1
EPSS Score
0.163
Published
2021-02-03
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
CVSS Score
9.8
EPSS Score
0.011
Published
2021-02-03
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
CVSS Score
7.5
EPSS Score
0.01
Published
2021-02-03
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
CVSS Score
8.8
EPSS Score
0.006
Published
2020-09-30
RainbowFish PacsOne Server 6.8.4 allows XSS.
CVSS Score
5.4
EPSS Score
0.003
Published
2020-09-30
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
CVSS Score
9.8
EPSS Score
0.01
Published
2020-09-30