CVE-2022-24632

概要

参考情報

• seclists.org/fulldisclosure/2023/Feb/12 · Exploit

device manager express のその他の脆弱性

• CVE-2022-24631中 5.4An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc paramete…
• CVE-2022-24630高 7.2An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an…
• CVE-2022-24629緊急 9.8An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory tr…
• CVE-2022-24628高 7.2An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter …
• CVE-2022-24627緊急 9.8An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parame…