PT-2023-4489 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue is related to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it. This is due to an unlimited file...

CVE-2023-33871: Undefined Security Weakness

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot...

Iagona ScrutisWeb 信任管理问题漏洞

Iagona ScrutisWeb is a security solution from the French company Iagona. A security vulnerability exists in Iagona ScrutisWeb version 2.1.37 and earlier versions. An attacker exploited the vulnerability to decrypt encrypted passwords into plaintext...

PT-2023-6721 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue is related to an insecure direct object reference vulnerability. This could allow an unauthenticated user to view profile information, including user login names and encrypted...

Iagona ScrutisWeb 安全漏洞

Iagona ScrutisWeb is a security solution from the French company Iagona. A security vulnerability exists in Iagona ScrutisWeb version 2.1.37 and earlier, which stems from a directory traversal vulnerability. The vulnerability can be exploited to gain direct access to arbitrary files outside of th...

Iagona ScrutisWeb 代码问题漏洞

Iagona ScrutisWeb is a security solution from the French company Iagona. A code issue vulnerability exists in Iagona ScrutisWeb version 2.1.37 and prior versions. An attacker could exploit this vulnerability to upload and execute arbitrary files...

CVE-2023-35189: Unrestricted Upload of File with Dangerous Type

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it...

CVE-2023-38257: Undefined Security Weakness

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords...

Iagona ScrutisWeb 安全漏洞

Iagona ScrutisWeb is a security solution from the French company Iagona. A security vulnerability exists in Iagona ScrutisWeb version 2.1.37 and earlier versions. An attacker could exploit the vulnerability to view configuration file information, including user login names and encrypted passwords...