CVE-2022-26250

概要

参考情報

• bencteux.fr/posts/synaman · Exploit

synaman のその他の脆弱性

• CVE-2022-26251高 7.2The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileg…
• CVE-2022-22828高 7.5An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared …
• CVE-2015-3140高 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Bu…
• CVE-2018-10814高 7.8Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
• CVE-2018-10763中 4.8Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields…