Webgui

Vendor:

First CVE: Sep 7, 2005 · Active for 20 years

12
Total CVEs
More Total CVEs than 64% of tracked products
2.0
Avg CVEs / Year
Bottom 1%
6.2
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Webgui over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 7, 2005
20 years ago
Most Recent CVE
Feb 9, 2015
4,183 days ago

CVE Severity & Scoring

Webgui12 CVEs
All CVEs352,231 CVEs
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown12 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown12 (100.0%)
User Interaction
None0 (0.0%)
Unknown12 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown12 (100.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attac
Dec 31, 20057.532NOYES
Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."
May 5, 200810.025NONO
Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown
May 26, 20106.820NONO
Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or (
Sep 7, 20057.519NONO
Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the usern
Jan 23, 20076.818NONO
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles.
Jan 18, 20076.818NONO
The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets. NOTE: some of these det
Jan 31, 20076.417NONO
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL.
Feb 15, 20065.016NONO
Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to create Admin accounts, a different vulnera
Dec 20, 20074.915NONO
Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via th
Feb 9, 20154.314NONO

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
8.3% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Webgui

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
7.7.916.80.6%00
7.7.816.80.6%00
7.7.716.80.6%00
7.7.616.80.6%00
7.7.516.80.6%00
7.7.416.80.6%00
7.7.316.80.6%00
7.7.216.80.6%00
7.7.1216.80.6%00
7.7.1116.80.6%00
7.7.1016.80.6%00
7.7.116.80.6%00
7.6.916.80.6%00
7.6.816.80.6%00
7.6.716.80.6%00
7.6.616.80.6%00
7.6.516.80.6%00
7.6.416.80.6%00
7.6.35.216.80.6%00
7.6.35.116.80.6%00