CVE-2018-10763

概要

参考情報

• packetstormsecurity.com/files/149324/SynaMan-4.0-Build-1488-Cross-Site-Scripting.html · Exploit
• exploit-db.com/exploits/45386 · Exploit

synaman のその他の脆弱性

• CVE-2022-26251高 7.2The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileg…
• CVE-2022-26250高 7.8Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
• CVE-2022-22828高 7.5An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared …
• CVE-2015-3140高 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Bu…
• CVE-2018-10814高 7.8Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.