Andrea Baesso

Multiple Stored Cross Site Scripting (XSS) issues were found.

A Reflected Cross Site Scripting (XSS) issue was found. This means an attacker could inject malicious scripts into a website, potentially affecting users who visit the site.

The issue allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges due to an OS Command Injection. No authentication is required.

The issue allows for a change of the administrative password and access to restricted functionalities, such as code execution, due to a back door.

The issue allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges through an OS Command Injection. Authentication is required to exploit this issue.

The issue allows unauthenticated directory traversal using ../, which can potentially lead to unauthorized access to sensitive files and directories.

The issue is related to a SQL Injection that leads to Information Disclosure. No authentication is required to exploit this issue. The injection point is located in one of the authentication parameters, specifically in the `authentication parameters`.