CVE-2021-45092

Mô tả

Tham khảo

• packetstormsecurity.com/files/166068/Thinfinity-VirtualUI-2.5.41.0-IFRAME-Injection.html · Third Party Advisory
• cybelesoft/virtualui · Issue Tracking

Lỗ hổng khác của thinfinity virtualui

• CVE-2021-46354CAO 7.5Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the par…
• CVE-2021-44554TRUNG BÌNH 5.3Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /changePassword URI. …
• CVE-2021-44848TRUNG BÌNH 5.3In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whet…
• CVE-2019-16385TRUNG BÌNH 6.1Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated …
• CVE-2019-16384TRUNG BÌNH 6.5Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web…