CVE-2020-14029

概要

参考情報

• ozeki.hu/index.php · Vendor Advisory
• DrunkenShells/Disclosures · Exploit

ozeki ng sms gateway のその他の脆弱性

• CVE-2020-14030高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By gener…
• CVE-2020-14031高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/mo…
• CVE-2020-14028高 7.2An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Scrip…
• CVE-2020-14027中 5.3An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENAB…
• CVE-2020-14026高 8.8CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17…