CVE-2019-10678

概要

参考情報

• packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html · Exploit
• domoticz/domoticz commit 2119afb · Patch
• exploit-db.com/exploits/46773 · Exploit

domoticz のその他の脆弱性

• CVE-2026-1001中 4.8Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of…
• CVE-2019-15480中 5.4Domoticz 4.10717 has XSS via item.Name.
• CVE-2019-10664緊急 9.8Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.