CVE-2018-19511

CVE-2018-19511 concerns Webgalamb 7.0 where wg7.php lacks CSRF protections, demonstrated by using wg7.php?options=1 to change the administrator password. The Red Hat and NVD/NVD-linked records corroborate a CSRF flaw affecting Webgalamb, with no explicit exploit details or patch/version fixes pro...

CVE-2018-19511

wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator password...

CVE-2018-19510

Webgalamb is affected by CVE-2018-19510 where subscriber.php (Webgalamb up to version 7.0) is vulnerable to SQL injection via the Client-IP HTTP header. The issue originates from insufficient validation of externally supplied SQL statements in the database layer, enabling an attacker to influence...

CVE-2018-19509

CVE-2018-19509 affects Webgalamb 7.0 (wg7.php) where a templating engine with proper contextual encoding is not used, and htmlspecialchars() is used opportunistically. Root cause: insufficient contextual encoding, allowing insertion of arbitrary strings into the database, which could enable JavaS...

CVE-2018-19509

wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS...

CVE-2018-19515

CVE-2018-19515 affects Webgalamb up to version 7.0. The issue: system/ajax.php endpoints intended for admin use can be accessed by unauthenticated users via certain query parameters (e.g., bgsend, atment_sddd1xGz, xls_bgimport), enabling broad method exposure. This is described as an information-...

CVE-2018-19515

In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the bgsend, atmentsddd1xGz, or xlsbgimport query parameters, most of these methods become available to unauthenticated users...

PT-2019-9844

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description A directory traversal vulnerability in system/ajax.php could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory. T...

PT-2019-9845

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The issue concerns the exposure of log files to the internet, potentially containing sensitive client data such as email addresses. This exposure also facilitates the exploitation of SQL injection...

PT-2019-9847

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The system/ajax.php functionality in Webgalamb is supposed to be restricted to administrators. However, unauthenticated users can access most of these methods by utilizing certain query parameters,...

PT-2019-9846

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The issue allows for arbitrary code execution, which can be exploited remotely without initial authentication. To exploit this, an attacker must bypass authentication to access administrative site...

PT-2019-9843

Name of the Vulnerable Software and Affected Versions Webgalamb version 7.0 Description The issue concerns a lack of security measures to prevent CSRF attacks. This can be demonstrated through the API endpoint "wg7.php?options=1" which allows changing the administrator password. Recommendations F...

PT-2019-9842

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The issue allows for SQL injection via the Client-IP HTTP request header in the subscriber.php file. Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue...

CVE-2018-19510: Improper Neutralization of Special Elements used in an SQL Command

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

PT-2019-9840

Name of the Vulnerable Software and Affected Versions Webgalamb version 7.0 Description The issue arises from the wg7.php file in Webgalamb, which makes opportunistic calls to htmlspecialchars instead of utilizing a templating engine with proper contextual encoding. This allows for the insertion ...

CVE-2018-19515: Incorrect Authorization

In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the bgsend, atmentsddd1xGz, or xlsbgimport query parameters, most of these methods become available to unauthenticated users...

CVE-2018-19514: Unrestricted Upload of File with Dangerous Type

In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication bypass to access administrative functions of the site to upload a crafted CSV file with a malicious payload that becomes part of a PHP eval...

CVE-2018-19511: Cross-Site Request Forgery (CSRF)

wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator password...

CVE-2018-19512: Improper Limitation of a Pathname to a Restricted Directory

In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory...

CVE-2018-19509: Improper Neutralization of Input During Web Page Generation

wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS...