CVE-2018-10814

Description

References

• packetstormsecurity.com/files/149326/SynaMan-40-Build-1488-SMTP-Credential-Disclosure.html · Third Party Advisory
• exploit-db.com/exploits/45387 · Third Party Advisory

synaman의 다른 취약점

• CVE-2022-26251높음 7.2The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileg…
• CVE-2022-26250높음 7.8Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
• CVE-2022-22828높음 7.5An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared …
• CVE-2015-3140높음 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Bu…
• CVE-2018-10763보통 4.8Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields…