Skip to content
OpenAdvisories

Package · Packagist

billz/raspap-webgui

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-44163

    raspap-webgui has a Directory Traversal vulnerability

    RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary files writable by the we…

    billz/raspap-webgui Packagist
  • Medium 4.7
    CVE-2024-2497

    RaspAP raspap-webgui HTTP POST Request provider.php code injection

    A vulnerability was found in RaspAP raspap-webgui 3.0.9 and classified as critical. This issue affects some unknown processing of the file includes/provider.php of the component HTTP POST Request Handler. The manipulation of the argument country leads to code…

    RaspAP raspap-webgui billz/raspap-webgui Packagist