CVE-2020-14027

概要

参考情報

• ozeki.hu/index.php · Product
• DrunkenShells/Disclosures · Exploit

ozeki ng sms gateway のその他の脆弱性

• CVE-2020-14030高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By gener…
• CVE-2020-14031高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/mo…
• CVE-2020-14028高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Scrip…
• CVE-2020-14026高 8.8CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17…
• CVE-2020-14025高 8.8Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked in…