webgrind project records
4 published records for vendor webgrind project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2023-54339No exploit | Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameterwebgrind project · webgrind · CWE-78 | Critical9.3 | — | 1.6% | Jan 13, 2026 |
35Monitor | CVE-2018-12909Proof of concept | Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has accwebgrind project · webgrind · CWE-22 | High7.5 | — | 16.1% | Jun 27, 2018 |
22Monitor | CVE-2012-1790Proof of concept | Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the fwebgrind project · webgrind · CWE-22 | Medium5.0 | — | 5.1% | Mar 19, 2012 |
20Monitor | CVE-2023-54341No exploit | Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameterwebgrind project · webgrind · CWE-79 | Medium5.1 | — | 0.3% | Jan 13, 2026 |
- CVE-2023-5433938Monitor
Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter
CriticalCVSS 9.3No exploitEPSS 1%webgrind project · webgrindJan 13, 2026
- CVE-2018-1290935Monitor
Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has acc
HighCVSS 7.5Proof of conceptEPSS 16%webgrind project · webgrindJun 27, 2018
- CVE-2012-179022Monitor
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the f
MediumCVSS 5.0Proof of conceptEPSS 5%webgrind project · webgrindMar 19, 2012
- CVE-2023-5434120Monitor
Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameter
MediumCVSS 5.1No exploitEPSS 0%webgrind project · webgrindJan 13, 2026