Viki Solutions Viki Vera 跨站脚本漏洞

Viki Solutions Viki Vera is a suite of workflow customization platforms from Canadian company Viki Solutions. The platform supports file uploading, job management, and other features. A security vulnerability exists in Viki Vera 4.9.1.26180, which can be exploited by an attacker to set a user's...

Viki Solutions Viki Vera 访问控制错误漏洞

Viki Solutions Viki Vera is a suite of workflow customization platforms from Canadian company Viki Solutions. The platform supports file uploading, job management, and other features. An access control error vulnerability exists in Viki Vera version 4.9.1.26180, which is related to the affected...

PT-2021-9038

Name of the Vulnerable Software and Affected Versions Viki Vera version 4.9.1.26180 Description An issue allows a user without access to a project to download or upload project files by directly opening the Project URL in the browser after logging in. Recommendations For Viki Vera version...

CVE-2019-20484: Direct Request

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in...

CVE-2019-20483: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie and use that to login to the application...

Viki Solutions Viki Vera Code Execution Vulnerability

Viki Solutions Viki Vera is a workflow customization platform from Viki Solutions Canada. The platform supports file uploading, job management, etc. Branding Module is one of the branding modules. A security vulnerability exists in the Branding Module in Viki Solutions Viki Vera version...

CVE-2019-15123

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...

Remote code execution

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...

CVE-2019-15123

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...

CVE-2019-15123

The CVE-2019-15123 entry concerns Viki Vera 4.9.1.26180, specifically the Branding Module. An authenticated user can modify the site logo and upload a malicious .aspx file, enabling Remote Code Execution on the affected site. The vulnerability is described consistently across multiple sources (in...

CVE-2019-15123: Unrestricted Upload of File with Dangerous Type

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...

PT-2020-9661

Name of the Vulnerable Software and Affected Versions Viki Vera version 4.9.1.26180 Description The Branding Module in Viki Vera allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...

vera-groningen.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006033 Security Researcher Hchabik Helped patch 2454 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting vera-groningen.nl website a...

Vera Edge Home Controller Command Injection Vulnerability

Vera Edge Home Controller is a smart home central control unit. A command injection vulnerability exists in the cgi-bin/cmh/webcam.sh file in Vera Edge Home Controller version 1.7.4452, which can be exploited by an attacker to execute illegal commands...

CVE-2019-15498

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...

CVE-2019-15498

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...

Design/Logic Flaw

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...

CVE-2019-15498

CVE-2019-15498 affects Vera Edge Home Controller 1.7.4452. The vulnerability is a remote command-injection in the CGI script at cgi-bin/cmh/webcam.sh, exploitable by unauthenticated users via the username parameter’s --output argument injection, enabling arbitrary OS command execution. The issue ...

CVE-2019-15498

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...

CVE-2019-15498: Improper Neutralization of Argument Delimiters in a Command

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...