Alcasar

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-38295 Jun 13, 05:15 CRITICAL Act Now

ALCASAR before 3.6.1 allows still_connected.php remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE Alcasar

NVD

CVSS 3.1

9.8

EPSS

0.8%

CVE-2024-38294 Jun 13, 05:15 CRITICAL Act Now

ALCASAR before 3.6.1 allows email_registration_back.php remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE Alcasar

NVD

CVSS 3.1

9.8

EPSS

0.8%

CVE-2024-38293 Jun 13, 05:15 CRITICAL Act Now

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE CSRF Alcasar

NVD

CVSS 3.1

9.6

EPSS

0.4%

CVE-2024-38295

EPSS 1% CVSS 9.8

CRITICAL Act Now

PHP RCE Alcasar

NVD

CVE-2024-38294

EPSS 1% CVSS 9.8

CRITICAL Act Now

PHP RCE Alcasar

NVD

CVE-2024-38293

EPSS 0% CVSS 9.6

CRITICAL Act Now

PHP RCE CSRF +1

NVD