Advisories · Technology

qriouslad System Dashboard.

Every CVE that names qriouslad System Dashboard among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-10377 CVE record

CVSS 4.3 Medium

System Dashboard <= 2.8.20 - Cross-Site Request Forgery
- qriouslad System Dashboard
- Cross-site request forgery (CSRF)
Not analysed yet 26 Sept 2025
CVE-2024-12299 CVE record

CVSS 6.1 Medium

System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter
- qriouslad System Dashboard
- Cross-site scripting (XSS)
Not analysed yet 30 Jan 2025
CVE-2023-5710 CVE record

CVSS 4.3 Medium

System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)
- qriouslad System Dashboard
- Broken access control
Not analysed yet 7 Dec 2023
CVE-2023-5713 CVE record

CVSS 4.3 Medium

System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)
- qriouslad System Dashboard
- Broken access control
Not analysed yet 7 Dec 2023
CVE-2023-5712 CVE record

CVSS 4.3 Medium

System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)
- qriouslad System Dashboard
- Broken access control
Not analysed yet 7 Dec 2023
CVE-2023-5714 CVE record

CVSS 4.3 Medium

System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)
- qriouslad System Dashboard
- Broken access control
Not analysed yet 7 Dec 2023
CVE-2023-5711 CVE record

CVSS 4.3 Medium

System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)
- qriouslad System Dashboard
- Broken access control
Not analysed yet 7 Dec 2023