CVE-2022-26251

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

CVE-2022-26251: Improper Privilege Management

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

PT-2022-17743

Name of the Vulnerable Software and Affected Versions Synaman versions 5.1 and below Description The HTTP interface was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges. Recommendations For versions 5.1 and below, update to a version above 5.1 to resol...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which can be exploited by an authenticated attacker to execute arbitrary code and elevate privileges via the HTTP interface...

PT-2022-17742

Name of the Vulnerable Software and Affected Versions Synaman versions 5.1 and below Description The issue is related to weak file permissions, allowing authenticated attackers to escalate privileges. Recommendations For Synaman versions 5.1 and below, update to a version above 5.1 to resolve the...

CVE-2022-26250: Incorrect Permission Assignment for Critical Resource

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies, USA. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which stems from a weak file permission in the software that can be exploited by an authenticated attacker to elevate...

CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-22828

Synametrics SynaMan prior to version 5.0 is affected by CVE-2022-22828 due to an insecure direct object reference in the file-download URL. An attacker can access unshared files by modifying the base64-encoded filename string, enabling remote file disclosure. The vulnerability is exposed via the ...

CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

Synametrics Technologies SynaMan 信息泄露漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies, USA. Synametrics Technologies SynaMan suffers from an information disclosure vulnerability that stems from an insecure direct object reference to a file download URL in SynaMan prior to 5.0. An attacker can...

PT-2022-15698

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan versions prior to 5.0 Description The issue is related to an insecure direct object reference for the file-download URL, allowing a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-22828: Authorization Bypass Through User-Controlled Key

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2015-3140

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

CVE-2015-3140

CVE-2015-3140 affects Synametrics products: SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567, vulnerable to cross-site request forgery (CSRF). Root cause: CSRF in multiple web app components allowing attacker to trigger actions in an authenticated use...

CVE-2015-3140

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

CVE-2015-3140: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

PT-2019-7177

Name of the Vulnerable Software and Affected Versions Synametrics Technologies SynaMan versions prior to 3.5 Build 1451 Synametrics Technologies Syncrify versions prior to 3.7 Build 856 Synametrics Technologies SynTail versions prior to 1.5 Build 567 Description The issue concerns multiple...