CVE-2016-20035

概要

参考情報

• zeroscience.mk/en/vulnerabilities/ZSL-2016-5341.php · Exploit
• exploit-db.com/exploits/40134 · Exploit
• vulncheck.com/advisories/wowza-streaming-engine-csrf-via-user-edit-endpoint · Third Party Advisory

streaming engine のその他の脆弱性

• CVE-2016-20036中 6.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input pas…
• CVE-2016-20034高 8.0Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges t…
• CVE-2016-20033高 7.8Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by r…
• CVE-2024-52056中 6.5Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the fi…
• CVE-2024-52055中 4.9Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any file on the file syst…