CVE Intelligence

FIBAR GROUP S.A. Home Center 2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting FIBAR GROUP S.A. Home Center 2: 1 record(s), with affected versions and fixes.

CVE-2020-36905 High · 7.5 CWE-829 Jan 6, 2026
FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API
FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.