CVE-2020-25495: Xinuo Openserver 5/6 - Cross-Site scripting

HoneyLabs honeypots recorded 1 probe matching CVE-2020-25495 from 1 distinct source IP address in the last 7 days. Severity is rated medium.

What the sensors show

All of them arrived on one day, 2026-11-02.

Request paths that identify it

  • /cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/{{*}}/)%3C%2Fscript%3E

Addresses probing it

Source IPProbesNetworkCountry
66.92.21.2001Psychz NetworksUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS40676Psychz Networks11

Where it comes from

CountryProbes
United States1

Captured requests

  • /cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/3LY0JsGLxtGgq0h4ZrC50mA40we/)%3C%2Fscript%3E

HTTP client fingerprints

  • b11cun050_0004001e_00ecc3a8

CVE report

Open a specific CVE from the CVE tracker.