CVE-2020-14026

概要

参考情報

• DrunkenShells/Disclosures · Exploit
• ozeki.hu/index.php · Release Notes
• ozeki.hu/index.php · Product

ozeki ng sms gateway のその他の脆弱性

• CVE-2020-14030高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By gener…
• CVE-2020-14031高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/mo…
• CVE-2020-14028高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Scrip…
• CVE-2020-14027中 5.3An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENAB…
• CVE-2020-14025高 8.8Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked in…