Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-68915 1 Riello-ups 1 Netman 208 2025-12-29 5.5 Medium
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.
CVE-2025-68914 1 Riello-ups 1 Netman 208 2025-12-29 6.5 Medium
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.