CVE-2020-12869

Description

References

• bzyo/cve-pocs · Exploit
• pacsone.net/download.htm · Release Notes

More vulnerabilities in pacsone server

• CVE-2020-29166HIGH 7.5PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure…
• CVE-2020-29165CRITICAL 9.8PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administra…
• CVE-2020-29164MEDIUM 6.1PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
• CVE-2020-29163HIGH 8.8PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
• CVE-2020-12870CRITICAL 9.8RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.