EUVD-2014-0396

Malware in sbrugna...

PT-2014-3587

Name of the Vulnerable Software and Affected Versions Xangati XSR versions prior to 11 Xangati XNR versions prior to 7 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in various parameters. This can be achieved through several API endpoints, including:...

PT-2014-3588

Name of the Vulnerable Software and Affected Versions Xangati XSR versions prior to 11 Xangati XNR versions prior to 7 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by using shell metacharacters in a gui input test.pl params parameter to the...

CVE-2014-0358: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read arbitrary files via a .. dot dot in 1 the file parameter in a getUpgradeStatus action to servlet/MGConfigData, 2 the download parameter in a download action to servlet/MGConfigDat...

CVE-2014-0359: Improper Neutralization of Special Elements used in an OS Command

Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a guiinputtest.pl params parameter to servlet/Installer...