Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using 1 fileUpload.do or 2 lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for ...

CVE-2016-1524: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using 1 fileUpload.do or 2 lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for ...

PT-2016-4851

Name of the Vulnerable Software and Affected Versions NETGEAR Management System NMS300 versions 1.5.0.11 and earlier Description A directory traversal issue exists in the data/config/image.do endpoint, allowing remote authenticated users to read arbitrary files by using a .. dot dot in the realNa...

PT-2016-4850

Name of the Vulnerable Software and Affected Versions NETGEAR Management System NMS300 versions 1.5.0.11 and earlier Description The issue allows remote attackers to execute arbitrary Java code by uploading a JSP file using "fileUpload.do" or "lib-1.0/external/flash/fileUpload.do" and then...

CVE-2016-1525: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. dot dot in the realName parameter...