Vulnerabilities > Monitorr

DATE CVE VULNERABILITY TITLE RISK
2024-01-19 CVE-2024-0713 Unrestricted Upload of File with Dangerous Type vulnerability in Monitorr 1.7.6M
A vulnerability was found in Monitorr 1.7.6m.
network
low complexity
monitorr CWE-434
8.8
2023-04-04 CVE-2023-26775 Unrestricted Upload of File with Dangerous Type vulnerability in Monitorr 1.7.6M
File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint.
local
low complexity
monitorr CWE-434
7.8
2023-04-04 CVE-2023-26776 Cross-site Scripting vulnerability in Monitorr 1.7.6M
Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file.
network
low complexity
monitorr CWE-79
6.1
2021-04-12 CVE-2020-28872 Incorrect Authorization vulnerability in Monitorr 1.7.6M
An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials.
network
low complexity
monitorr CWE-863
critical
9.8
2021-02-10 CVE-2020-28871 Unrestricted Upload of File with Dangerous Type vulnerability in Monitorr 1.7.6M
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.
network
low complexity
monitorr CWE-434
critical
9.8