deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15280
Published: 2019-10-16
Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious code in certain sections of the interface that are visible to other users. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. An attacker would need valid administrator credentials to exploit this vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-fpwr-xss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-fpwr-xss
CVE: CVE-2019-15281
Published: 2019-10-16
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The attacker must have valid administrator credentials. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by injecting malicious code into a troubleshooting file. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-ise-xss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-ise-xss
CVE: CVE-2019-15282
Published: 2019-10-16
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web interface. A successful exploit could allow the attacker to read a tcpdump file generated with a particular naming scheme.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-ise-infodis; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-ise-infodis
CVE: CVE-2019-15962
Published: 2019-10-16
Description: A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-275, CWE-276
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-tele-ce-filewrite; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-tele-ce-filewrite
CVE: CVE-2019-16682
Published: 2019-10-16
Description: The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://extensions.typo3.org/extension/url_redirect/; https://typo3.org/security/advisory/typo3-ext-sa-2019-015/; https://extensions.typo3.org/extension/url_redirect/
CVE: CVE-2019-16698
Published: 2019-10-16
Description: The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://extensions.typo3.org/extension/direct_mail; https://typo3.org/security/advisory/typo3-ext-sa-2019-016/; https://extensions.typo3.org/extension/direct_mail
CVE: CVE-2019-16699
Published: 2019-10-16
Description: The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://extensions.typo3.org/extension/sr_freecap; https://typo3.org/security/advisory/typo3-ext-sa-2019-018/; https://extensions.typo3.org/extension/sr_freecap
CVE: CVE-2019-16700
Published: 2019-10-16
Description: The slub_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. For versions 1.2.2 and below, this results in Remote Code Execution. In versions later than 1.2.2, this can result in Denial of Service, since the web space can be filled up with arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://extensions.typo3.org/extension/slub_events; https://typo3.org/security/advisory/typo3-ext-sa-2019-017/; https://extensions.typo3.org/extension/slub_events
CVE: CVE-2019-17435
Published: 2019-10-16
Description: A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.
CVSS Score: 5.5 (MEDIUM)
References: https://security.paloaltonetworks.com/CVE-2019-17435; https://security.paloaltonetworks.com/CVE-2019-17435
CVE: CVE-2019-17436
Published: 2019-10-16
Description: A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root users to overwrite root files on the file system.
CVSS Score: 7.1 (HIGH)
References: https://security.paloaltonetworks.com/CVE-2019-17436; https://security.paloaltonetworks.com/CVE-2019-17436
CVE: CVE-2019-17512
Published: 2019-10-16
Description: There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to log_clear.php, which could be used to erase attack traces.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://github.com/dahua966/Routers-vuls; https://github.com/dahua966/Routers-vuls/blob/master/DIR-412/vuls_info.md; https://github.com/dahua966/Routers-vuls
CVE: CVE-2019-13116
Published: 2019-10-16
Description: The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notes; https://threat.tevora.com/mulesoft-3-8-unauthenticated-rce/; https://docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notes
CVE: CVE-2019-17664
Published: 2019-10-16
Description: NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try to execute the cmd.exe program from this working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://github.com/NationalSecurityAgency/ghidra/issues/107; https://github.com/NationalSecurityAgency/ghidra/issues/107
CVE: CVE-2019-17665
Published: 2019-10-16
Description: NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/NationalSecurityAgency/ghidra/issues/286; https://github.com/NationalSecurityAgency/ghidra/issues/286
CVE: CVE-2019-17607
Published: 2019-10-16
Description: HongCMS 3.0.0 has XSS via the install/index.php servername parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png; https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2019-17608
Published: 2019-10-16
Description: HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png; https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2019-17609
Published: 2019-10-16
Description: HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png; https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2019-17610
Published: 2019-10-16
Description: HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png; https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2019-17611
Published: 2019-10-16
Description: HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png; https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2019-17666
Published: 2019-10-17
Description: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html; https://access.redhat.com/errata/RHSA-2020:0328
CVE: CVE-2019-17667
Published: 2019-10-17
Description: Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://misteralfa-hack.blogspot.com/2019/10/comtech-stored-xss-heights-remote.html; https://misteralfa-hack.blogspot.com/2019/10/comtech-stored-xss-heights-remote.html
CVE: CVE-2019-17668
Published: 2019-10-17
Description: Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector.
CVSS Score: 6.8 (MEDIUM)
References: https://news.ycombinator.com/item?id=21280205; https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/; https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11
CVE: CVE-2019-17669
Published: 2019-10-17
Description: WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://core.trac.wordpress.org/changeset/46475; https://github.com/WordPress/WordPress/commit/608d39faed63ea212b6c6cdf9fe2bef92e2120ea
CVE: CVE-2019-17670
Published: 2019-10-17
Description: WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows paths are mishandled during certain validation of relative URLs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://core.trac.wordpress.org/changeset/46472; https://github.com/WordPress/WordPress/commit/9db44754b9e4044690a6c32fd74b9d5fe26b07b2
CVE: CVE-2019-17671
Published: 2019-10-17
Description: In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://core.trac.wordpress.org/changeset/46474; https://github.com/WordPress/WordPress/commit/f82ed753cf00329a5e41f2cb6dc521085136f308
CVE: CVE-2019-17672
Published: 2019-10-17
Description: WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://seclists.org/bugtraq/2020/Jan/8; https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
CVE: CVE-2019-17673
Published: 2019-10-17
Description: WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.
CVSS Score: 7.5 (HIGH)
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://core.trac.wordpress.org/changeset/46478; https://github.com/WordPress/WordPress/commit/b224c251adfa16a5f84074a3c0886270c9df38de
CVE: CVE-2019-17674
Published: 2019-10-17
Description: WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://seclists.org/bugtraq/2020/Jan/8; https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
CVE: CVE-2019-17675
Published: 2019-10-17
Description: WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-843
References: https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html; https://core.trac.wordpress.org/changeset/46477; https://github.com/WordPress/WordPress/commit/b183fd1cca0b44a92f0264823dd9f22d2fd8b8d0
CVE: CVE-2019-17676
Published: 2019-10-17
Description: app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/anx1ang/notes/issues/1; https://github.com/anx1ang/notes/issues/1
CVE: CVE-2019-14423
Published: 2019-10-17
Description: A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://noskill1337.github.io/homematic-with-cux-daemon-remote-code-execution; https://www.eq-3.com/products/homematic.html; https://noskill1337.github.io/homematic-with-cux-daemon-remote-code-execution
CVE: CVE-2019-14424
Published: 2019-10-17
Description: A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://noskill1337.github.io/homematic-with-cux-daemon-local-file-inclusion; https://www.eq-3.com/products/homematic.html; https://noskill1337.github.io/homematic-with-cux-daemon-local-file-inclusion
CVE: CVE-2019-15849
Published: 2019-10-17
Description: eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the victim. After the victim logs in to the session, the attacker can use that session. The attacker could create SSH logins after a valid session and easily compromise the system.
CVSS Score: 7.3 (HIGH)
CWE: CWE-384
References: https://noskill1337.github.io/homematic-ccu3-session-fixation; https://www.eq-3.com/products/homematic.html; https://noskill1337.github.io/homematic-ccu3-session-fixation
CVE: CVE-2019-15850
Published: 2019-10-17
Description: eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://noskill1337.github.io/homematic-ccu3-remote-code-execution; https://www.eq-3.com/products/homematic.html; https://noskill1337.github.io/homematic-ccu3-remote-code-execution
CVE: CVE-2019-11253
Published: 2019-10-17
Description: Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-776
References: https://access.redhat.com/errata/RHSA-2019:3239; https://access.redhat.com/errata/RHSA-2019:3811; https://access.redhat.com/errata/RHSA-2019:3905
CVE: CVE-2019-16330
Published: 2019-10-17
Description: In NCH Express Accounts Accounting v7.02, persistent cross site scripting (XSS) exists in Invoices/Sales Orders/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Sales Orders/Items/Customers/Quotes fields parameter to inject arbitrary JavaScript.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/47505; https://www.exploit-db.com/exploits/47505
CVE: CVE-2019-11284
Published: 2019-10-17
Description: Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
CVSS Score: 8.6 (HIGH)
CWE: CWE-522, CWE-522
References: https://pivotal.io/security/cve-2019-11284; https://pivotal.io/security/cve-2019-11284
CVE: CVE-2019-13411
Published: 2019-10-17
Description: An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 10.0 (CRITICAL)
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201908005; https://www.twcert.org.tw/en/cp-128-3013-92adb-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201908005
CVE: CVE-2019-14287
Published: 2019-10-17
Description: In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-755
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00042.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00047.html; http://packetstormsecurity.com/files/154853/Slackware-Security-Advisory-sudo-Updates.html
CVE: CVE-2019-16917
Published: 2019-10-17
Description: WiKID Enterprise 2FA (two factor authentication) Enterprise Server through 4.2.0-b2047 is vulnerable to SQL injection through the searchDevices.jsp endpoint. The uid and domain parameters are used, unsanitized, in a SQL query constructed in the buildSearchWhereClause function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-sql-injection
CVE: CVE-2019-17114
Published: 2019-10-17
Description: A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allows remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/userPreregistration.jsp. The preRegistrationData parameter is vulnerable: a reflected cross-site scripting occurs immediately after a .csv file is uploaded. The malicious script is stored and can be executed again when the List Pre-Registration functionality is used.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-cross-site-scripting
CVE: CVE-2019-17115
Published: 2019-10-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML that is triggered when Logs.jsp is visited. The rendered_message column is retrieved and displayed, unsanitized, on Logs.jsp. A remote attack can populate the rendered_message column with malicious values via: (1) H parameter to /wikid/servlet/com.wikidsystems.server.GetDomainHash (2) S parameter to: - /wikid/DomainData - /wikid/PreRegisterLookup - /wikid/PreRegister - /wikid/InitDevice - /wikid/servlet/InitDevice2S - /wikid/servlet/InitDevice3S - /servlet/com.wikidsystems.server.InitDevice2S - /servlet/com.wikidsystems.server.InitDevice3S - /servlet/com.wikidsystems.server.InitDevice4S - /wikid/servlet/com.wikidsystems.server.InitDevice4AES - /wikid/servlet/com.wikidsystems.server.InitDevice5AES (3) a parameter to: - /wikid/PreRegisterLookup - /wikid/InitDevice - /wikid/servlet/InitDevice2S - /wikid/servlet/InitDevice3S - /servlet/com.wikidsystems.server.InitDevice2S - /servlet/com.wikidsystems.server.InitDevice3S - /servlet/com.wikidsystems.server.InitDevice4S - /wikid/servlet/com.wikidsystems.server.InitDevice4AES - /wikid/servlet/com.wikidsystems.server.InitDevice5AES.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-cross-site-scripting
CVE: CVE-2019-17116
Published: 2019-10-17
Description: A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/groups.jsp. The groupName parameter is vulnerable: the reflected cross-site scripting occurs immediately after the group is created. The malicious script is stored and will be executed again whenever /WiKIDAdmin/groups.jsp is visited.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-cross-site-scripting