95 matches found
Path traversal
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...
CVE-2021-37451
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...
CVE-2021-37450
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...
CVE-2021-37451
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...
CVE-2021-37450
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...
Cross site scripting
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...
CVE-2021-37451
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...
Cross site scripting
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...
CVE-2021-37442
CVE-2021-37442 affects NCH IVM Attendant v5.12 and earlier. The vulnerability is a directory traversal flaw exploitable through the parameter viewfile?file=/.., enabling an authenticated attacker to read files on the system due to improper path handling. Documents consistently describe this as a ...
CVE-2021-37442
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files...
CVE-2021-37443
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...
CVE-2021-37443
CVE-2021-37443 affects NCH IVM Attendant (Windows) and is due to a path traversal vulnerability in the logdeleteselected check0 parameter used for file deletion, allowing an attacker to delete files. Affected: NCH IVM Attendant v5.12 and earlier. Exploitation details beyond this are not provided ...
CVE-2021-37444
CVE-2021-37444 affects NCH IVM Attendant v5.12 and earlier. A directory-traversal weakness occurs when uploading plugins via ZIP archives, where a ZIP element with a pathname pointing to the Windows startup folder or to files used by built-in Out-Going Message or Autodial functions can lead to co...
CVE-2021-37444
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt...
CVE-2021-37448
CVE-2021-37448 affects NCH IVM Attendant v5.12 and earlier. The root cause is stored XSS in the Mailbox name due to insufficient input filtering for special characters, enabling execution of client-side code. Affected software is NCH IVM Attendant; impact is cross-site scripting with potential fo...
CVE-2021-37448
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name stored...
CVE-2021-37449
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...
CVE-2021-37449
CVE-2021-37449 affects NCH IVM Attendant (Windows) prior to or including v5.12. The vulnerability is a cross-site scripting (XSS) in the web interface, exploitable through the parameter /ogmlist?folder= on the IVR/attendant UI due to insufficient input validation. The CNVD/NVD entries describe an...
CVE-2021-37450
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...
CVE-2021-37450
CVE-2021-37450 describes a reflected (and potentially stored) cross-site scripting vulnerability in NCH IVM Attendant v5.12 and earlier , exploitable via the parameter/url path /ogmprop?id= . Multiple connected sources corroborate an XSS condition caused by inadequate input validation in the IVR/...