Interworx

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-2531 Oct 21, 16:55 MEDIUM POC This Month

SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 build 577 allows remote authenticated users to execute. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Web Control Panel Interworx

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

1.7%

CVE-2014-2035 Feb 27, 15:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.13 build 574 allows remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

PHP XSS Web Control Panel Interworx

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2014-2531

EPSS 2% CVSS 6.5

MEDIUM POC This Month

PHP SQLi Web Control Panel +1

NVD Exploit-DB

CVE-2014-2035

EPSS 0% CVSS 4.3

MEDIUM This Month

PHP XSS Web Control Panel +1

NVD