69 matches found
KioWare 安全漏洞
KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to certain interfaces. A security vulnerability exists in KioWare 8.33 and earlier versions, which stems from the presence of an incomplete blacklist filter, and can be exploited...
KioWare 安全漏洞
KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to certain interfaces. A security vulnerability exists in KioWare 8.33 and earlier versions, which stems from the presence of an incomplete blacklist filter, and can be exploited...
PT-2023-24963 · Unknown · Kioware For Windows
Name of the Vulnerable Software and Affected Versions: KioWare for Windows versions through 8.33 Description: The issue is related to an incomplete blacklist filter for blocked dialog boxes on Windows 10. Attackers can exploit this by opening a file dialog box via the window.print function, which...
CVE-2023-34642
KioWare for Windows (through v8.33) contains an incomplete blacklist filter for blocked dialog boxes on Windows 10. This allows an attacker to trigger the file dialog via showDirectoryPicker(), which can be used to open an unprivileged command prompt. The CVE is documented with a HIGH impact (AV:...
PT-2023-24964 · Microsoft · Windows 10
Name of the Vulnerable Software and Affected Versions: KioWare for Windows versions through 8.33 Description: The issue is related to an incomplete blacklist filter for blocked dialog boxes on Windows 10, allowing attackers to open a file dialog box via the showDirectoryPicker function. This can...
CVE-2023-34641
KioWare for Windows, up to v8.33, contains an incomplete blacklist filter for blocked dialog boxes on Windows 10. An attacker can trigger a file dialog via window.print() and potentially open an unprivileged command prompt. Remediation guidance in connected sources indicates upgrading to a versio...
CVE-2023-34641
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print which can then be used to open an unprivileged command prompt...
CVE-2023-34641
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print which can then be used to open an unprivileged command prompt...
CVE-2023-34642
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker which can then be used to open an unprivileged command prompt...
CVE-2022-44875
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...
CVE-2022-44875
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...
Code injection
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...
CVE-2022-44875
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...
CVE-2022-44875
KioWare (Windows) 8.33 and earlier versions are affected by CVE-2022-44875 due to KioScriptingUrlACL.AclActions.AllowHigh being set for the about:blank origin. This allows JavaScript code via KioUtils.Execute to obtain SYSTEM access. The vulnerability details across multiple sources confirm the r...
CVE-2022-44875
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...
PT-2023-14564 · Kioware · Kioware
Name of the Vulnerable Software and Affected Versions: KioWare versions through 8.33 Description: The issue allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code because KioWare sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin. Recommendations: Fo...
KioWare 跨站脚本漏洞
KioWare is a suite of self-service terminal browser software. The software is capable of restricting end-user access to specific interfaces. A security vulnerability exists in KioWare 8.33 and earlier versions, which is caused by improper parameterization and can be exploited by an attacker to ga...
CVE-2018-18435
KioWare Server version 4.9.6 and older installs by default to "C:\kiowarecom" with weak folder permissions granting any user full permission "Everyone: F" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as...
CVE-2018-18435
KioWare Server version 4.9.6 and older installs by default to "C:\kiowarecom" with weak folder permissions granting any user full permission "Everyone: F" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as...