Design/Logic Flaw

2007-06-2021:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

JSON

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods.

CPENameOperatorVersion
web_thunderbolteq1.7.3.109

CPE	Name	Operator	Version
	web_thunderbolt	eq	1.7.3.109

References

osvdb.org/38474

www.securityfocus.com/bid/24552

www.whsafe.com/Article/ldgg/200706/12375.shtml