📦 Rhinos

CVE-2024-5407 is a critical PHP code injection vulnerability in RhinOS 3.0-1190 that allows remote attackers to execute arbitrary code through the search parameter. This could lead to complete system ...

RhinOS 3.0-1190 contains a cross-site scripting (XSS) vulnerability in the phpthumb.php component. Attackers can craft malicious URLs with the 'tamper' parameter to steal session cookies or credential...