CVE-2019-19457

Description

References

• packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html · Exploit
• sec-consult.com/en/vulnerability-lab/advisories/index.html · Exploit

proaccess space 的其他漏洞

• CVE-2019-19459严重 9.8An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE…
• CVE-2019-19458高危 8.6SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.
• CVE-2019-19460中危 5.5An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by…