Skip to content
OpenAdvisories

Vendor

Vaelsys

3 known vulnerabilities.

Products

VaelsysV4 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-8261

    Vaelsys VaelsysV4 User Creation vgrid_server.php improper authorization

    A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgrid_server.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be perfor…

    Vaelsys VaelsysV4
  • High 7.3
    CVE-2025-8259

    Vaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injection

    A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_DataObjectProc of the file /grid/vgrid_server.php of the component Web interface. Such manipulation of the argument xajaxargs leads to os com…

    Vaelsys VaelsysV4