CVE-2018-11638

Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to upload malicious code to the web root to gain code execution...

CVE-2018-11640

XML External Entity XXE vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-11636

CVE-2018-11636 affects Dialogic PowerMedia XMS (admin console) up to version 3.5. It is a cross-site request forgery (CSRF) vulnerability that enables remote attackers to perform malicious and unauthorized actions. The root cause is CSRF in the administrative interface, with impact described as p...

CVE-2018-11635

Dialogic PowerMedia XMS (administration console) is affected by CVE-2018-11635 due to a hard-coded cryptographic key used to protect cookie session data in /var/www/xms/application/config/config.php. This vulnerability enables remote attackers to bypass authentication in PowerMedia XMS versions u...

CVE-2018-11635

Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to bypass authentication...

CVE-2018-11634

Dialogic PowerMedia XMS (before version 3.5 SU2) is affected by a local-privilege issue in the administrative console where passwords are stored in plaintext in /var/www/xms/xmsdb/default.db. This allows local users to read the web app’s passwords in cleartext, representing plaintext password sto...

CVE-2018-11637

Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root...

CVE-2018-11643

CVE-2018-11643 affects Dialogic PowerMedia XMS (administrative console) and enables SQL injection via the filterPattern parameter. According to the CVE description, the vulnerability allows remote authenticated users to execute arbitrary SQL commands. The issue is stated to affect PowerMedia XMS ...

CVE-2018-11639

Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to access a user's password in cleartext...

CVE-2018-11642

CVE-2018-11642 affects Dialogic PowerMedia XMS (3.5 and earlier). The flaw is an incorrect privilege assignment in the /var/www/xms/cleanzip.sh shell script that runs periodically, enabling a local attacker to execute code with root privileges. Connected documents corroborate the local-privation ...

CVE-2018-11639

Dialogic PowerMedia XMS prior to version 3.5 SU2 suffers a vulnerability where passwords are stored in plaintext inside cookies handled by /var/www/xms/application/controllers/verifyLogin.php. This plaintext storage enables remote attackers to access user passwords in cleartext. The CVE entry cit...

CVE-2018-11634

Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db...

CVE-2018-11640

Affected product: Dialogic PowerMedia XMS (web service). Vulnerability: XML External Entity (XXE) injection in the web service. Versions affected: PowerMedia XMS before 3.5 SU2. Impact: remote attacker can read arbitrary files or cause denial of service (resource consumption). Severity: CVSS v3 b...

CVE-2018-11638

The CVE-2018-11638 issue affects Dialogic PowerMedia XMS (through 3.5 and earlier) and stems from unrestricted file upload via the administrative console. An authenticated remote attacker could upload a dangerous file to the web root, enabling remote code execution. Public details explicitly desc...

CVE-2018-11637

The Dialogic PowerMedia XMS information disclosure (CVE-2018-11637) affects PowerMedia XMS 3.5 and earlier. A symbolic link in the web root enables remote attackers to read files under /var/, due to a web-root symlink. Impact: information leakage via administrative console exposure. Root cause: s...

CVE-2018-11636

Cross-site request forgery CSRF vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to execute malicious and unauthorized actions...

CVE-2018-11641

The vulnerability CVE-2018-11641 affects Dialogic PowerMedia XMS (administrative console) where the file /var/www/xms/application/controllers/gatherLogs.php uses hard-coded credentials. This allows remote attackers to interact with the web service in PowerMedia XMS 3.5 and earlier. Root cause is ...