peter bassill · operator
$ cve CVE-2017-1000444 JSON

CVE-2017-1000444

9.8
CRITICAL · CVSS 3.0 · EPSS 3.1% (pctl 87)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information disclosure and remote code execution

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.11% — more likely to be exploited than 87% of all CVEs
WeaknessCWE-89
On CISA KEVno
Public exploitnone known
Published2018-01-02
Last modified2026-06-17

Affected (1)

VendorProduct
openhacker projectopenhacker

References

→ the Explorer  ·  watch your stack  ·  NVD