Lucene search
PRIOn knowledge basePRION:CVE-2018-8819HistoryJun 14, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-06-1420:29:00
PRIOn knowledge base
www.prio-n.com
4
An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via the “X-Wap-Profile” HTTP header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| automatedlogic_webctrl | eq | 6.1 | |
| automatedlogic_webctrl | eq | 6.0 | |
| automatedlogic_webctrl | eq | 6.5 |
Related
nessus
nessus
Automated Logic Corporation (CVE-2018-8819)
2023-04-06 00:00:00
nvd
nvd
CVE-2018-8819
2018-06-14 20:29:00
cvelist
cvelist
CVE-2018-8819
2018-06-14 20:00:00
packetstorm
packetstorm
WebCTRL Out-Of-Band XML Injection
2018-06-09 00:00:00
cve
cve
CVE-2018-8819
2018-06-14 20:29:00