CVE-2018-19934

Mô tả

Tham khảo

• packetstormsecurity.com/files/151474/SolarWinds-Serv-U-FTP-15.1.6.25-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2019/Feb/5 · Mailing List
• themissinglink.com.au/security-advisories-cve-2018-19934 · Third Party Advisory

Lỗ hổng khác của serv-u ftp server

• CVE-2020-22428TRUNG BÌNH 4.8SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a J…
• CVE-2020-15543NGHIÊM TRỌNG 9.8SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
• CVE-2020-15542NGHIÊM TRỌNG 9.8SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
• CVE-2020-15541NGHIÊM TRỌNG 9.8SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
• CVE-2019-19829TRUNG BÌNH 5.4A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability t…