CVE-2018-19510

Description

References

• packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2019/Jan/15 · Exploit

Altre vulnerabilità di webgalamb

• CVE-2018-19515CRITICO 9.8In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the …
• CVE-2018-19514CRITICO 9.8In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation require…
• CVE-2018-19513ALTO 7.5In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filen…
• CVE-2018-19512ALTO 7.2In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by au…
• CVE-2018-19511MEDIO 6.5wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator p…