Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7198 State: PUBLISHED Published: 2020-12-10T03:34:17.478405Z Last Updated: 2024-09-16T21:07:42.305Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-77, CWE-78 Description: This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-16
CVE ID: CVE-2019-7201 State: PUBLISHED Published: 2019-12-04T16:41:48 Last Updated: 2024-08-04T20:38:33.433Z Vendors: n/a Products: QNAP NetBak Replicator Problem Types: Unquoted Service Path Description: An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201912-02
CVE ID: CVE-2019-7211 State: PUBLISHED Published: 2019-04-24T14:37:13 Last Updated: 2024-08-04T20:46:44.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
CVE ID: CVE-2019-7212 State: PUBLISHED Published: 2019-04-24T14:43:02 Last Updated: 2024-08-04T20:46:44.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
CVE ID: CVE-2019-7213 State: PUBLISHED Published: 2019-04-24T14:46:14 Last Updated: 2024-08-04T20:46:44.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities
artermail/release-notes/current - https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
CVE ID: CVE-2019-7214 State: PUBLISHED Published: 2019-04-24T00:00:00 Last Updated: 2024-08-04T20:46:44.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/ - http://packetstormse
://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/ - http://packetstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.html - http://packetstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.html
CVE ID: CVE-2019-7215 State: PUBLISHED Published: 2019-06-06T16:04:00 Last Updated: 2024-08-04T20:46:44.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie can be reused to maintain access to the account, even if the account credentials and permissions are changed. Additional Analyst Notes: - CVE Program Container: References: - https://knowledgebase.progress.com/#sort=relevancy&f:%40objecttypelabel=%5BProduct%20Alert%5D - https://knowledgebase.progress.com/articles/Article/Security-
ort=relevancy&f:%40objecttypelabel=%5BProduct%20Alert%5D - https://knowledgebase.progress.com/articles/Article/Security-Advisory-For-Resolving-Security-Vulnerabilities-May-2019
CVE ID: CVE-2019-7216 State: PUBLISHED Published: 2019-01-31T08:00:00 Last Updated: 2024-08-04T20:46:44.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ekultek/cve-2019-7216 - https://encodable.com/filechucker/changelog/
CVE ID: CVE-2019-7217 State: PUBLISHED Published: 2019-05-13T18:08:17 Last Updated: 2024-08-04T20:46:44.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required. Additional Analyst Notes: - CVE Program Container: References: - http://www.sk-it.com/en/cve.html
CVE ID: CVE-2019-7218 State: PUBLISHED Published: 2019-05-13T18:19:19 Last Updated: 2024-08-04T20:46:44.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using username/otp combination only (phase 2 of 2FA). Additional Analyst Notes: - CVE Program Container: References: - http://www.sk-it.com/en/cve.html
CVE ID: CVE-2019-7219 State: PUBLISHED Published: 2019-04-11T18:43:58 Last Updated: 2024-08-04T20:46:44.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead. Additional Analyst Notes: - CVE Program Container: References: - https://stash.kopano.io/repos?visibility=public - https://github.com/verifysecurity/CVE-2019-7219
CVE ID: CVE-2019-7220 State: PUBLISHED Published: 2019-06-06T15:57:28 Last Updated: 2024-08-04T20:46:44.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.x-cart.com/blog - https://cxsecurity.com/issue/WLB-2019020192
CVE ID: CVE-2019-7221 State: PUBLISHED Published: 2019-03-17T18:26:10 Last Updated: 2024-08-04T20:46:44.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151713/KVM-VMX-Preemption-Timer-Use-After-Free.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/ - https://github.com/torvalds/li
st/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/ - https://github.com/torvalds/linux/commits/master/arch/x86/kvm - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html - http://www.openwall.com/lists/oss-security/2019/02/18/2 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecec76885bcfe3294685dc363fd1273df0d5d65f - https://bugs.chromium.org/p/project-zero/issues/detail?id=1760 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.co
announce/2019/04/msg00004.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3931-1/ - https://usn.ubuntu.com/3931-2/ - https://usn.ubuntu.com/3930-2/ - https://security.netapp.com/advisory/ntap-20190404-0002/ - https://access.redhat.com/errata/RHSA-2019:0833 - https://access.redhat.com/errata/RHSA-2019:0818 - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://access.redhat.com/errata/RHBA-2019:0959 - https://support.f5.com/csp/article/K08413011 - https://access.redhat.com/errata/RHSA-2019:3967 - https://access.redhat.com/errata/RHSA-2019:4058
CVE ID: CVE-2019-7222 State: PUBLISHED Published: 2019-03-17T18:52:17 Last Updated: 2024-08-04T20:46:46.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/ - http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html - http://www.securityfocus.com/bid/106963 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJ
/bid/106963 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/ - https://github.com/torvalds/linux/commits/master/arch/x86/kvm - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a - http://www.openwall.com/lists/oss-security/2019/02/18/2 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1759 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://usn.ubuntu.com/3932-1/
9/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3931-1/ - https://usn.ubuntu.com/3933-2/ - https://usn.ubuntu.com/3931-2/ - https://usn.ubuntu.com/3930-2/ - https://security.netapp.com/advisory/ntap-20190404-0002/ - https://usn.ubuntu.com/3933-1/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517
CVE ID: CVE-2019-7223 State: PUBLISHED Published: 2019-03-16T12:00:00 Last Updated: 2024-08-04T20:46:44.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2019020191
CVE ID: CVE-2019-7225 State: PUBLISHED Published: 2019-06-27T16:38:39 Last Updated: 2024-08-04T20:46:45.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags (MODBUS coils) mapping to the HMI. These credentials are the idal123 password for the IdalMaster account, and the exor password for the exor account. These credentials are used over both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these
both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device. This affects ABB CP635 HMI, CP600 HMIClient, Panel Builder 600, IDAL FTP server, IDAL HTTP server, and multiple other HMI components. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jun/38 - http://packetstormsecurity.com/files/153397/ABB-HMI-Hardcoded-Credentials.html - https://www.darkmatter.ae/xen1thlabs/abb-hmi-hardcoded-credentials-vulnerability-xl-19-009/ - http://seclists.org/fulldisclosure/2019/Jun/38 - http://w
hlabs/abb-hmi-hardcoded-credentials-vulnerability-xl-19-009/ - http://seclists.org/fulldisclosure/2019/Jun/38 - http://www.securityfocus.com/bid/108922
CVE ID: CVE-2019-7226 State: PUBLISHED Published: 2019-06-27T15:52:12 Last Updated: 2024-08-04T20:46:44.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the username and cleartext password of the user. An attacker can then supply an IDALToken value in a cookie, which will allow them to perform privileged operations such as restarting the service with /cgi/restart. A GET request to /cgi/loginD
low them to perform privileged operations such as restarting the service with /cgi/restart. A GET request to /cgi/loginDefaultUser may result in "1 #S_OK IDALToken=532c8632b86694f0232a68a0897a145c admin admin" or a similar response. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jun/39 - http://packetstormsecurity.com/files/153402/ABB-IDAL-HTTP-Server-Authentication-Bypass.html - http://www.securityfocus.com/bid/108886 - https://www.darkmatter.ae/xen1thlabs/abb-idal-http-server-authentication-bypass-vulnerability-xl-19-010/ - http://seclists.org/fulldisclosure/2019/Jun/39
CVE ID: CVE-2019-7227 State: PUBLISHED Published: 2019-06-27T15:37:54 Last Updated: 2024-08-04T20:46:44.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default credential pair exor/exor to become an authenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jun/37 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&D
ts.org/fulldisclosure/2019/Jun/37 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch - http://packetstormsecurity.com/files/153396/ABB-IDAL-FTP-Server-Path-Traversal.html - http://www.securityfocus.com/bid/108886 - http://seclists.org/fulldisclosure/2019/Jun/37 - https://www.darkmatter.ae/xen1thlabs/abb-idal-ftp-server-path-traversal-vulnerability-xl-19-008/
CVE ID: CVE-2019-7228 State: PUBLISHED Published: 2019-06-27T14:21:41 Last Updated: 2024-08-04T20:46:45.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jun/43 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch - http://packetstormsecurity.com/files/153
load.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch - http://packetstormsecurity.com/files/153404/ABB-IDAL-HTTP-Server-Uncontrolled-Format-String.html - http://www.securityfocus.com/bid/108886 - https://www.darkmatter.ae/xen1thlabs/abb-idal-http-server-uncontrolled-format-string-vulnerability-xl-19-012/ - http://seclists.org/fulldisclosure/2019/Jun/43
CVE ID: CVE-2019-7229 State: PUBLISHED Published: 2019-06-24T17:15:02 Last Updated: 2024-08-04T20:46:45.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jun/34 - http://seclists.org/fulldisclosure/2019/J
gram Container: References: - http://seclists.org/fulldisclosure/2019/Jun/34 - http://seclists.org/fulldisclosure/2019/Jun/34 - https://www.darkmatter.ae/xen1thlabs/abb-hmi-absence-of-signature-verification-vulnerability-xl-19-005/ - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010376&LanguageCode=en&DocumentPartId=&Action=Launch - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010402&LanguageCode=en&DocumentPartId=&Action=Launch - http://packetstormsecurity.com/files/153387/ABB-HMI-Missing-Signature-Verification.html
CVE ID: CVE-2019-7230 State: PUBLISHED Published: 2019-06-24T16:17:15 Last Updated: 2024-08-04T20:46:45.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/published-advisories/ - http://seclists.org/fulldisclosure/2019/Jun/33 - http://seclists.org/fulldisclosure/2019/Jun/33 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR0103
n/33 - http://seclists.org/fulldisclosure/2019/Jun/33 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch - http://packetstormsecurity.com/files/153386/ABB-IDAL-FTP-Server-Uncontrolled-Format-String.html - http://www.securityfocus.com/bid/108886
CVE ID: CVE-2019-7231 State: PUBLISHED Published: 2019-06-24T19:32:37 Last Updated: 2024-08-04T20:46:45.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that terminates the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/published-advisories/ - http://seclists.org/fulldisclosure/2019/Jun/35 - https://search.abb.com/library/Download
1thlabs/published-advisories/ - http://seclists.org/fulldisclosure/2019/Jun/35 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch - http://seclists.org/fulldisclosure/2019/Jun/35 - http://packetstormsecurity.com/files/153395/ABB-IDAL-FTP-Server-Buffer-Overflow.html - http://www.securityfocus.com/bid/108886
CVE ID: CVE-2019-7232 State: PUBLISHED Published: 2019-06-24T16:07:36 Last Updated: 2024-08-04T20:46:45.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured Exception Handler (SEH) address. An unauthenticated attacker can submit a Host header value of 2047 bytes or more to overflow the buffer and overwrite the SEH address, which can then be leveraged to execute attacker-controlled code on the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/publ
n the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/published-advisories/ - http://seclists.org/fulldisclosure/2019/Jun/40 - http://seclists.org/fulldisclosure/2019/Jun/40 - https://search.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch - http://packetstormsecurity.com/files/153403/ABB-IDAL-HTTP-Server-Stack-Based-Buffer-Overflow.html - http://www.securityfocus.com/bid/108886
CVE ID: CVE-2019-7233 State: PUBLISHED Published: 2019-01-30T21:00:00Z Last Updated: 2024-09-17T03:12:57.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uvoteam/libdoc/issues/6
CVE ID: CVE-2019-7234 State: PUBLISHED Published: 2019-01-30T21:00:00 Last Updated: 2024-08-04T20:46:45.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/51
CVE ID: CVE-2019-7235 State: PUBLISHED Published: 2019-01-30T21:00:00 Last Updated: 2024-08-04T20:46:45.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/52
CVE ID: CVE-2019-7236 State: PUBLISHED Published: 2019-01-30T21:00:00 Last Updated: 2024-08-04T20:46:45.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/53