Web Server (Zerof) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-02-18. Vendor: Zerof.

CVEs of Web Server

• CVE-2022-25322 - CVSS 9.8 (critical), 2022-02-18: ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
• CVE-2022-25323 - CVSS 6.1 (medium), 2022-02-18: ZEROF Web Server 2.0 allows /admin.back XSS.
• CVE-2021-30175 - CVSS 9.8 (critical), 2021-04-13: ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.