CVE-2019-17119

概要

参考情報

• packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html · Exploit
• seclists.org/fulldisclosure/2019/Oct/35 · Exploit
• securitymetrics.com/blog/wikid-2fa-enterprise-server-sql-injection · Exploit

two factor authentication enterprise server のその他の脆弱性

• CVE-2019-17116中 6.1A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to…
• CVE-2019-17115中 6.1Multiple cross-site scripting (XSS) vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbi…
• CVE-2019-17114中 6.1A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allows remote attackers t…
• CVE-2019-16917高 8.8WiKID Enterprise 2FA (two factor authentication) Enterprise Server through 4.2.0-b2047 is vulnerable to SQL injection through the searchDevi…