Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) app parameter to apps/apps.php and the (2) wsk parameter to wsk/wsk.php.
7.7AI Score
0.056EPSS
SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server.
6.5CVSS
6.3AI Score
0.001EPSS