Webgrind

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-54341 MEDIUM POC This Month

Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts via the file parameter in index.php. [CVSS 6.1 MEDIUM]

PHP XSS Webgrind

NVD GitHub Exploit-DB

CVSS 3.1

6.1

EPSS

0.1%

CVE-2023-54339 CRITICAL POC Act Now

Webgrind 1.1 has unauthenticated command injection via the dataFile parameter in index.php. The profiling tool executes OS commands directly from URL parameters. PoC available.

PHP Command Injection Webgrind

NVD GitHub Exploit-DB

CVSS 3.1

9.8

EPSS

0.7%

CVE-2023-54341

EPSS 0% CVSS 6.1

MEDIUM POC This Month

PHP XSS Webgrind

NVD GitHub Exploit-DB

CVE-2023-54339

EPSS 1% CVSS 9.8

CRITICAL POC Act Now

Webgrind 1.1 has unauthenticated command injection via the dataFile parameter in index.php. The profiling tool executes OS commands directly from URL parameters. PoC available.

PHP Command Injection Webgrind

NVD GitHub Exploit-DB