Skip to content
OpenAdvisories

Package · Ubuntu

spotweb

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2026-108546

    Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

    Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metachar…

    spotweb spotweb spotweb Ubuntu
  • Unscored —
    CVE-2021-43725

    There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remo…

    spotweb Ubuntu
  • Unscored —
    CVE-2021-33966

    Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via…

    spotweb Ubuntu
  • Unscored —
    CVE-2020-35545 Public exploit

    Time-based SQL injection exists in Spotweb 1.4.9 via the query string.

    spotweb Ubuntu