CVE-2018-10814

Description

References

• packetstormsecurity.com/files/149326/SynaMan-40-Build-1488-SMTP-Credential-Disclosure.html · Third Party Advisory
• exploit-db.com/exploits/45387 · Third Party Advisory

Weitere Schwachstellen in synaman

• CVE-2022-26251HOCH 7.2The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileg…
• CVE-2022-26250HOCH 7.8Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
• CVE-2022-22828HOCH 7.5An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared …
• CVE-2015-3140HOCH 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Bu…
• CVE-2018-10763MITTEL 4.8Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields…