Skip to content
Noroxi

onekeyadmin records

8 published records for vendor onekeyadmin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2023-26949
    39Monitor

    An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary co

    CriticalCVSS 9.8No exploitEPSS 1%

    onekeyadmin · onekeyadminMar 6, 2023

  • CVE-2023-26957
    36Monitor

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.

    CriticalCVSS 9.1No exploitEPSS 1%

    onekeyadmin · onekeyadminMar 9, 2023

  • CVE-2023-26956
    30Monitor

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.

    HighCVSS 7.5No exploitEPSS 1%

    onekeyadmin · onekeyadminMar 8, 2023

  • CVE-2023-26948
    30Monitor

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.

    HighCVSS 7.5No exploitEPSS 1%

    onekeyadmin · onekeyadminMar 8, 2023

  • CVE-2023-26952
    21Monitor

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.

    MediumCVSS 5.4No exploitEPSS 0%

    onekeyadmin · onekeyadminMar 8, 2023

  • CVE-2023-26950
    21Monitor

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Cate

    MediumCVSS 5.4No exploitEPSS 0%

    onekeyadmin · onekeyadminMar 8, 2023

  • CVE-2023-26951
    21Monitor

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.

    MediumCVSS 5.4No exploitEPSS 0%

    onekeyadmin · onekeyadminMar 15, 2023

  • CVE-2023-26953
    19Monitor

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.

    MediumCVSS 4.8No exploitEPSS 0%

    onekeyadmin · onekeyadminMar 7, 2023