Vulnerabilities > Saltos

DATE CVE VULNERABILITY TITLE RISK
2019-03-21 CVE-2018-18762 Information Exposure vulnerability in Saltos 3.1
SaltOS 3.1 r8126 contains a database download vulnerability.
network
saltos CWE-200
4.3
2018-11-16 CVE-2018-18763 SQL Injection vulnerability in Saltos 3.1
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
network
low complexity
saltos CWE-89
7.5
2018-11-16 CVE-2018-18761 SQL Injection vulnerability in Saltos 3.1
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
network
low complexity
saltos CWE-89
7.5
2018-11-16 CVE-2018-18760 Cross-Site Request Forgery (CSRF) vulnerability in Saltos Rhinos 3.0
RhinOS 3.0 build 1190 allows CSRF.
network
saltos CWE-352
4.3