CVE-2022-45894

Description

References

• sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream · Exploit

Weitere Schwachstellen in planet estream

• CVE-2022-45896KRITISCH 9.8Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload…
• CVE-2022-45895MITTEL 6.5Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in…
• CVE-2022-45893HOCH 8.8Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing…
• CVE-2022-45892MITTEL 5.4In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS) vulnerabilities exist: Disclaimer, Search Function, Comments…
• CVE-2022-45891KRITISCH 9.1Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access…