← Back

Clonos

clonos

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Clonos
clonos

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Clonos
1Clonos
Jun 17, 2026
Oct 24, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.
1Clonos
1Clonos
Jun 17, 2026
Oct 24, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.