CVE-2018-11635: Use of Hard-coded Credentials

Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to bypass authentication...

CVE-2018-11638: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to upload malicious code to the web root to gain code execution...

PT-2018-10723

Name of the Vulnerable Software and Affected Versions Dialogic PowerMedia XMS versions prior to 3.5 SU2 Description The issue allows remote attackers to access a user's password in cleartext due to plaintext storage of passwords within cookies in the administrative console. This occurs in the...

PT-2018-10718

Name of the Vulnerable Software and Affected Versions Dialogic PowerMedia XMS versions prior to 3.5 SU2 Description The issue allows local users to access user passwords in cleartext by reading the /var/www/xms/xmsdb/default.db file. This occurs due to plaintext storage of passwords in the...

CVE-2018-11641: Use of Hard-coded Credentials

Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a web service...

CVE-2018-11642: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user...

CVE-2018-11643: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execute arbitrary SQL commands via the filterPattern parameter...

CVE-2018-11639: Insufficiently Protected Credentials

Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to access a user's password in cleartext...

CVE-2018-11634: Insufficiently Protected Credentials

Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db...

PT-2018-10724

Name of the Vulnerable Software and Affected Versions Dialogic PowerMedia XMS versions prior to 3.5 SU2 Description The issue allows remote attackers to read arbitrary files or cause a denial of service due to resource consumption. This is related to an XML External Entity XXE vulnerability in th...