CVE-2018-11643

概要

参考情報

• d3adend.org/blog · Exploit

powermedia xms のその他の脆弱性

• CVE-2018-11642高 7.8Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows …
• CVE-2018-11641緊急 9.8Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XM…
• CVE-2018-11640緊急 9.1XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitra…
• CVE-2018-11639高 8.1Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialo…
• CVE-2018-11638高 7.2Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authe…