Pihome vulnerabilities
We track 3 vulnerabilities in Pihome products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2025.
Latest Pihome vulnerabilities
- 8.8 High severity
PiHome: Missing Authorization
A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /user_accounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initi
- 8.8 High severity
PiHome: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The
- 8.8 High severity
PiHome: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModal_MQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be lau