Anglers-Net: >> Cgi An-Anlyzer >> 2019-06-24 Security Vulnerabilities
Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted URL.
CVSS Score
6.1
EPSS Score
0.004
Published
2024-01-22
Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page.
CVSS Score
8.8
EPSS Score
0.026
Published
2020-01-06
Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page.
CVSS Score
6.1
EPSS Score
0.004
Published
2020-01-06
DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page.
CVSS Score
6.1
EPSS Score
0.004
Published
2020-01-06
Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer.
CVSS Score
7.5
EPSS Score
0.007
Published
2020-01-06