clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.
CVSS Score
9.8
EPSS Score
0.106
Published
2019-10-24
A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2019-10-24