CVE-2019-19991

概要

参考情報

• seling.it · Product
• seling.it/product/vam · Product
• telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html · Exploit

visual access manager のその他の脆弱性

• CVE-2023-42250中 6.1Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.
• CVE-2023-42249中 6.1Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.
• CVE-2023-42248中 6.5An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manip…
• CVE-2023-42247中 6.1Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.
• CVE-2023-42246中 6.1Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.