Vulnerabilities in rAthena
8 resultsCVE-2025-58447CRITICALrAthena has heap-based buffer overflow in login serverEPSS 0.9%CVE-2022-4421LOWrAthena FluxCP Service Desk Image URL view.php cross site scriptingEPSS 0.4%CVE-2025-62170HIGHrAthena map-server use-after-free vulnerability in RODEXEPSS 0.4%CVE-2025-58448CRITICALrAthena has SQL Injection in PartyBooking component via `WorldName` parameter.EPSS 0.4%CVE-2025-58750HIGHrAthena missing bound check in chclif_parse_moveCharSlotEPSS 0.3%CVE-2024-45799HIGHJavascript Injection in Vending Info/Buyers Info Module in FluxCPEPSS 0.3%CVE-2026-116254MEDIUMrathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validationEPSS 0.3%CVE-2025-62797HIGHCSRF in FluxCP account endpoints allows account takeover / state-changing actionsEPSS 0.2%