Skip to content
OpenAdvisories

Vendor

SaltOS

3 known vulnerabilities.

Products

RhinOS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2024-5409

    Cross-site Scripting vulnerability in RhinOS from SaltOS

    RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to a victim to obtain their session details.

    SaltOS RhinOS
  • High 7.1
    CVE-2024-5408

    Cross-site Scripting vulnerability in RhinOS from SaltOS

    Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL.

    SaltOS RhinOS