287 matches found
CVE-2021-37447
CVE-2021-37447 concerns NCH Quorum v2.03 and earlier. An authenticated user can perform directory traversal via the parameter documentdelete?file=/.., enabling file deletion on the affected system. The core issue is a path traversal in a function responsible for file deletion, allowing access bey...
CVE-2021-37452
CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...
CVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37463
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...
CVE-2021-37463
CVE-2021-37463 affects NCH Quorum v2.03 and earlier, with a stored XSS in the User Display Name. The root cause is a script injection that is stored and rendered in the user display context. Impact stated in CNVD/CNNVD references describes attackers potentially stealing cookie‑based authenticatio...
CVE-2021-37464
CVE-2021-37464 affects NCH Quorum v2.03 and earlier, with a stored XSS via the Conference Description. Reported across multiple sources (CNVD/CNNVD, Red Hat, NVD, CVE lists). The vulnerability allows injection into the Conference Description field, enabling XSS which can lead to cookie-based auth...
CVE-2021-37464
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...
CVE-2021-37465
CVE-2021-37465 affects NCH Quorum v2.03 and earlier. The vulnerability is a reflected XSS via the /uploaddoc?id= parameter, as described by NVD/CNVD/CNNVD/Red Hat entries. The connected documents confirm the affected product/version and attack vector; no remediation details are provided in the do...
CVE-2021-37465
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...
CVE-2021-37466
CVE-2021-37466 affects NCH Quorum v2.03 and earlier, with a reflected cross-site scripting (XSS) vulnerability via /conference?id= . The cited sources consistently describe XSS in these versions; no exploit details or mitigations are provided in the connected documents. If remediation exists, it ...
CVE-2021-37466
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
CVE-2021-37467
CVE-2021-37467 affects NCH Quorum v2.03 and earlier. It describes a reflected cross-site scripting (XSS) vulnerability that occurs via the parameter confid in the URL /conferencebrowseuploadfile?confid=. The root cause, as stated, is improper handling/unsanitized user input, leading to client-sid...
CVE-2021-37467
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= reflected...
CVE-2021-37467: Improper Neutralization of Input During Web Page Generation
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= reflected...
CVE-2021-37466: Improper Neutralization of Input During Web Page Generation
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
CVE-2021-37446: Improper Limitation of a Pathname to a Restricted Directory
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...
NCH Quorum 访问控制错误漏洞
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. An information disclosure vulnerability exists in NCH Quorum, which stems from the fact that the product does not add valid permissions for access to the local .dat file, which could be exploit...
NCH Quorum 跨站脚本漏洞
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. A cross-site scripting vulnerability exists in NCH Quorum, which could be exploited by attackers to steal cookie-based authentication credentials from victims...
CVE-2021-37447: Improper Limitation of a Pathname to a Restricted Directory
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...