Zerof: Security Vulnerabilities
ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-02-18
ZEROF Web Server 2.0 allows /admin.back XSS.
CVSS Score
6.1
EPSS Score
0.082
Published
2022-02-18
ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.
CVSS Score
9.8
EPSS Score
0.745
Published
2021-04-13
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.
CVSS Score
9.8
EPSS Score
0.019
Published
2021-04-13