NCH Quorum 路径遍历漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a teleconference server. The caller dials into the server to participate in a conference call. A directory traversal and arbitrary file deletion vulnerability exists in NCH Quorum, which can be exploited by an attacker ...

PT-2021-21679

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue is related to stored XSS that exists via the Conference Description. Recommendations For versions 2.03 and earlier, update to a version later than 2.03 to resolve the issue...

NCH Quorum 跨站脚本漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. A cross-site scripting vulnerability exists in NCH Quorum, which stems from the product's /conferencebrowseuploadfile?confid=failure to properly handle user input data and can be exploited to...

NCH Quorum 跨站脚本漏洞

NCH Quorum is software that runs as a teleconferencing server on a Windows PC. A cross-site scripting vulnerability exists in NCH Quorum 2.03 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via /uploaddoc?id=...

PT-2021-21680

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue exists due to a reflected XSS via the /uploaddoc?id= API endpoint. Recommendations For versions 2.03 and earlier, update to a version later than 2.03 to resolve the issue...

PT-2021-21681

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description A security issue exists, allowing for XSS via the "/conference?id=" endpoint reflected. Recommendations For versions 2.03 and earlier, update to a version later than 2.03 to resolve the issue...

PT-2021-21658

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "logprop?file=/.." endpoint. Recommendations For NCH Quorum versions 2.03 a...

PT-2021-21660

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, which can lead to file deletion. This is achieved by using the documentdelete?file=/.. endpoint. Recommendations For NCH...

CVE-2021-37464: Improper Neutralization of Input During Web Page Generation

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...

CVE-2021-37463: Improper Neutralization of Input During Web Page Generation

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

NCH Quorum 跨站脚本漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. A cross-site scripting vulnerability exists in NCH Quorum, which could be exploited by attackers to steal cookie-based authentication credentials from victims...

PT-2021-21682

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description A reflected XSS issue exists via the "/conferencebrowseuploadfile?confid=" endpoint, allowing for potential exploitation. Recommendations For versions 2.03 and earlier, as a temporary workaround...

PT-2021-21678

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description A stored XSS issue exists via the User Display Name. Recommendations For versions 2.03 and earlier, update to a version later than 2.03 to resolve the issue...

NCH Quorum 路径遍历漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...

NCH Quorum 跨站脚本漏洞

NCH Quorum is software that runs as a teleconferencing server on a Windows PC. A cross-site scripting vulnerability exists in NCH Quorum 2.03 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via /conference?id=...

CVE-2021-37445: Improper Limitation of a Pathname to a Restricted Directory

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

PT-2021-21659

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "documentprop?file=/.." endpoint. Recommendations For NCH Quorum versions...

PT-2021-21666

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows local users to discover cleartext login information relating to users by reading the local .dat configuration files. Recommendations For versions 2.03 and earlier, consider...

CVE-2021-37452: Cleartext Storage of Sensitive Information

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

SUSE: Security Advisory (SUSE-SU-2018:3074-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...