VendorsRainbowfishsoftwarepacsone_serverall versions
Vulnerabilities

Rainbowfishsoftware RainbowFish PacsOne

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2020-29165
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
Published 2021-02-03 · Modified
9.8EPSS 0.017
CVE-2020-12870
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
Published 2020-09-30 · Modified
9.8EPSS 0.016
CVE-2020-12715
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
Published 2020-09-30 · Modified
8.8EPSS 0.012
CVE-2020-29163
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
Published 2021-02-03 · Modified
8.8EPSS 0.011
CVE-2020-29166
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
Published 2021-02-03 · Modified
7.5EPSS 0.023
CVE-2020-29164
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
Published 2021-02-03 · Modified
6.1EPSS 0.062
CVE-2020-12869
RainbowFish PacsOne Server 6.8.4 allows XSS.
Published 2020-09-30 · Modified
5.4EPSS 0.006