CVE-2019-13597

Mô tả

Tham khảo

• pentest.com.tr/exploits/Sahi-Pro-v8-x-Unauthenticated-RCE-Exploit-Python.html · Exploit
• exploit-db.com/exploits/47110 · Exploit

Lỗ hổng khác của sahi pro

• CVE-2019-13066TRUNG BÌNH 6.1Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, b…
• CVE-2019-13063CAO 7.5Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on th…
• CVE-2019-15102NGHIÊM TRỌNG 9.8An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) does not have any authen…
• CVE-2018-20472TRUNG BÌNH 5.4An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.
• CVE-2018-20470CAO 7.5An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the …