Uniguest: >> Tripleplay >> 24.1.1 Security Vulnerabilities
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request.
CVSS Score
10.0
EPSS Score
0.003
Published
2025-03-04
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request.
CVSS Score
10.0
EPSS Score
0.005
Published
2025-03-04
Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.
CVSS Score
7.1
EPSS Score
0.0
Published
2025-03-04
Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.
CVSS Score
9.8
EPSS Score
0.001
Published
2025-03-04