CVE-2018-10173

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

Directory traversal

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

Design/Logic Flaw

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

CVE-2018-10175

CVE-2018-10175 affects Digital Guardian Management Console 7.1.2.0015 and is an XML External Entity (XXE) injection vulnerability. The connected CNVD entry specifies an XML external entity injection that could allow an attacker to cause external web requests, enumerate web content, or read files ...

CVE-2018-10174

Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...

CVE-2018-10176

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10173

CVE-2018-10173 affects Digital Guardian Management Console 7.1.2.0015 and enables authenticated remote code execution via an Arbitrary File Upload vulnerability. The NVD entry documents a NETWORK attack with LOW attack complexity and no user interaction, resulting in high impact (C/H/I/A: HIGH). ...

CVE-2018-10174

The CVE concerns Digital Guardian Management Console 7.1.2.0015 with a server-side request forgery (SSRF) vulnerability. The issue lets remote attackers induce the console to access file:// URLs to read arbitrary files, and to send TCP traffic to intranet hosts or obtain NTLM hashes, even when th...

CVE-2018-10173

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

CVE-2018-10175

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

CVE-2018-10176

The CVE-2018-10176 entry concerns Digital Guardian Management Console 7.1.2.0015, which exposes a directory traversal vulnerability enabling an attacker to read arbitrary files on the server. Publicly documented details come from CNVD-2018-08777, which explicitly describes a path traversal flaw i...

CVE-2018-10173: Unrestricted Upload of File with Dangerous Type

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

CVE-2018-10174: Server-Side Request Forgery (SSRF)

Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...

CVE-2018-10175: Improper Restriction of XML External Entity Reference

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

CVE-2018-10176: Improper Limitation of a Pathname to a Restricted Directory

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

Digital Guardian Management Console 7.1.2.0015 XXE Injection

Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============ Digital Guardian is an American data los...

Digital Guardian Management Console 7.1.2.0015 XXE Injection Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description:...

Digital Guardian Management Console 7.1.2.0015 Server Side Request Forgery Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - Server Side Request Forgery Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10174 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015...

Digital Guardian Management Console 7.1.2.0015 Server Side Request Forgery

Title: Digital Guardian Managment Console - Server Side Request Forgery Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10174 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============ Digital Guardian is an American...

Digital Guardian Management Console 7.1.2.0015 Shell Upload

Title: Digital Guardian Managment Console - Arbitrary File Upload Leading To Remote Code Execution RCE Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10173 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============...