Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

cservit — Vulnerabilities & Security Advisories 8

Browse all 8 CVE security advisories affecting cservit. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cservit is a network monitoring and management solution primarily used for IT infrastructure oversight. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues. The product's web interface has been particularly prone to input validation weaknesses, allowing unauthorized access or system compromise. While no major public security incidents have been widely documented, the five CVEs recorded reveal consistent patterns of insufficient sanitization in API endpoints and administrative functions. These vulnerabilities typically stem from improper access controls and unauthenticated endpoints, posing significant risks in enterprise environments where the software manages critical network components.

CVE ID Title CVSS Severity Published
CVE-2026-12743 affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-89 4.9 Medium 2026-08-14
CVE-2026-15296 affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-79 6.4 Medium 2026-07-10
CVE-2026-6169 affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-94 7.2 High 2026-05-27
CVE-2024-10675 affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-79 6.1 Medium 2024-11-21
CVE-2024-10227 affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-79 6.4 Medium 2024-10-29
CVE-2024-6562 affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-200 5.3 Medium 2024-08-09
CVE-2024-1851 affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-862 6.3 Medium 2024-03-08
CVE-2024-2298 affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-862 4.3 Medium 2024-03-08

This page lists every published CVE security advisory associated with cservit. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.