2478 matches found
Acronis: SQL injection in https://www.acronis.cz/ via the log parameter
I have discovered a SQL injection in https://www.acronis.cz/ using the POST request via the log parameter. Using sqlmap, I have retrieved the current user: 'uacronis@localhost'' The command used: sqlmap -p log -r request-cz.txt --current-user --level=2 --risk=2 I did not perform any other actions...
CVE-2020-35664
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting XSS in the console...
CVE-2020-35556
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur...
CVE-2020-35664
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting XSS in the console...
CVE-2020-35556
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur...
Cross site scripting
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting XSS in the console...
Information disclosure
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur...
CVE-2020-35556
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur...
CVE-2020-35556
CVE-2020-35556 affects Acronis Cyber Protect before 15 Update 1 build 26172. The root cause is a misconfigured CORS policy in the local notification service, enabling information disclosure. Documents consistently cite potential exposure but do not provide specific exploit details, affected subco...
CVE-2020-35664
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting XSS in the console...
CVE-2020-35664
CVE-2020-35664 : Multiple sources (NVD, Red Hat, CNVD, CVE lists) report an XSS vulnerability in Acronis Cyber Protect prior to 15 Update 1, build 26172, specifically in the console. The exact root cause, affected components, exploit methods, and remediation steps are not detailed in the provided...
CVE-2020-35556: Undefined Security Weakness
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur...
CVE-2020-35664: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting XSS in the console...
PT-2021-11788
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect versions prior to 15 Update 1 build 26172 Description: An issue in the local notification service of Acronis Cyber Protect causes a CORS misconfiguration, leading to information disclosure. Recommendations: For versions...
TIETEN Acronis Cyber Protect 跨站脚本漏洞
Acronis Cyber Protect is an application. Acronis Cyber Protect 15 Update 1 build 26172 has a cross-site scripting vulnerability that stems from cross-site scripting XSS in the console. . No detailed vulnerability details are available at this time...
TIETEN Acronis Cyber Protect 访问控制错误漏洞
Acronis Cyber Protect is an application. providing unified user network protection by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 Update 1 build 2617 Previous versions...
PT-2021-11822
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect versions prior to 15 Update 1 build 26172 Description: The issue is related to cross-site scripting XSS in the console of the affected software. This means an attacker could potentially inject malicious scripts into the...
Acronis True Image for Windows code issue vulnerability
Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image for Windows 2021 Update 3 previous versions have a code issue...