CVE-2021-45887

CVE-2021-45887 affects Ponton X/P Messenger prior to 3.11.2. The issue is a path traversal vulnerability in private/SchemaSetUpload.do when handling uploaded ZIP files, allowing an attacker with administrative web access to upload an executable script and achieve remote code execution on the serv...

CVE-2021-45886

An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web application vulnerable to a weakened version of CSRF, where an arbitrary token of a low-privileged user such as operator can be used to confirm actions of higher-privileged ones such...

CVE-2021-45886

CVE-2021-45886 concerns PONTON X/P Messenger before 3.11.2. The flaw is that anti-CSRF tokens are globally valid, creating a weakened CSRF condition where an arbitrary token from a low-privilege user (e.g., operator) can be used to confirm actions of a higher-privilege user (e.g., xpadmin). The p...

CVE-2021-45889

CVE-2021-45889 affects Ponton X/P Messenger before version 3.11.2. The issue is a reflected XSS vulnerability in multiple endpoints exposed via private/index.jsp and query strings (e.g., partners/ShowNonLocalPartners.do?localID=, databaseTab.jsp, activationMainTab.jsp, serverTab.jsp, emailNotific...

CVE-2021-45889

An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as demonstrated by private/index.jsp?partners/ShowNonLocalPartners.do?localID= or private/index.jsp or private/index.jsp?database/databaseTab.jsp or...

CVE-2021-45888

Ponton X/P Messenger prior to version 3.11.2 is affected by a cross-site scripting (XSS) vulnerability in the left navigation tree of the web UI. The issue allows injection of JavaScript into navigation nodes, and creation of such nodes is restricted to users with the Configuration Administrator ...

CVE-2021-45888

An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role...

CVE-2021-45887: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files, an executable script can be uploaded by web application administrators, giving the attacker remote code execution on the underlying server via an imgs/.jsp UR...

PT-2022-12451

Name of the Vulnerable Software and Affected Versions PONTON X/P Messenger versions prior to 3.11.2 Description The navigation tree in the web application is susceptible to XSS, allowing the injection of JavaScript into its nodes. This issue can be exploited by users with the role of Configuratio...

PT-2022-12449

Name of the Vulnerable Software and Affected Versions PONTON X/P Messenger versions prior to 3.11.2 Description An issue was discovered where anti-CSRF tokens are globally valid, making the web application vulnerable to a weakened version of CSRF. This allows an arbitrary token of a low-privilege...

CVE-2021-45889: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as demonstrated by private/index.jsp?partners/ShowNonLocalPartners.do?localID= or private/index.jsp or private/index.jsp?database/databaseTab.jsp or...

CVE-2021-45886: Cross-Site Request Forgery (CSRF)

An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web application vulnerable to a weakened version of CSRF, where an arbitrary token of a low-privileged user such as operator can be used to confirm actions of higher-privileged ones such...

PT-2022-12450

Name of the Vulnerable Software and Affected Versions PONTON X/P Messenger versions prior to 3.11.2 Description An issue was discovered due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files. This allows an executable script to be uploaded by web application administrators,...

PONTON X/P Messenger 路径遍历漏洞

PONTON X/P Messenger is a highly configurable ebXML, AS/1, AS/2, AS/3 and AS/4 compliant messaging software from the German company PONTON. ponton X/P Messenger is vulnerable to a path traversal vulnerability that could be exploited by an attacker to upload executable scripts while obtaining...

PT-2022-12452

Name of the Vulnerable Software and Affected Versions PONTON X/P Messenger versions prior to 3.11.2 Description An issue was discovered in several functions, which are vulnerable to reflected XSS. This is demonstrated by various API endpoints, such as...

CVE-2021-45888: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role...

PONTON X/P Messenger 跨站脚本漏洞

PONTON X/P Messenger is a highly configurable ebXML, AS/1, AS/2, AS/3 and AS/4 compliant messaging software from the German company PONTON. ponton X/P Messenger is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to obtain sensitive user information and...

PT-2022-36851

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash, specifically a WRITE 8 type. The crash state includes functions such as doemit, doinsert, and p ere. ...

GO-2021-0235 Incorrect operations on the P-224 curve in crypto/elliptic

The P224 Curve implementation can in rare circumstances generate incorrect outputs, including returning invalid points from ScalarMult...

CVE-2022-23998

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R11, 10.5.03.77 in Android Q10 and 9.0.6.68 in Android P9 allows untrusted applications to take a picture in screenlock status...