CVE-2018-13980

Zeta Producer Desktop CMS versions prior to 14.2.1 are vulnerable to unauthenticated file disclosure and local file inclusion when the filebrowser plugin is installed. The root cause is a directory traversal vulnerability in assets/php/filebrowser/filebrowser.main.php?file=../. An attacker can ex...

Zeta Producer Desktop CMS 14.2.0 - Remote Code Execution Local File Disclosure

Zeta Producer Desktop CMS 14.2.0 - Remote Code Execution Local File Disclosure SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote Code Execution & Local File Disclosure product: Zeta Producer Desktop CMS vulnerable...

Zeta Producer Desktop CMS 14.2.0 Code Execution / File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote Code Execution & Local File Disclosure product: Zeta Producer Desktop CMS vulnerable version: =14.2.1 CVE number: CVE-2018-13981, CVE-2018-13980 impact: critical...