CVE-2018-18725: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

CVE-2018-18725

Summary: CVE-2018-18725 is a cross-site scripting vulnerability affecting YUNUCMS 1.1.5, specifically in the path admin/banner/editbanner?id=20. The connected documents confirm an XSS issue in that component. NVD references assign CVSS scores: CVSS v2 base 3.5 (LOW) and CVSS v3 base 4.8 (MEDIUM),...

CVE-2017-5199

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

Design/Logic Flaw

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

CVE-2017-5199

CVE-2017-5199 affects SolarWinds Log and Event Manager (LEM) up to version 6.3.1. The vulnerability enables an authenticated remote attacker to execute arbitrary code by editing the file /usr/local/contego/scripts/mgrconfig.pl via the editbanner feature. The NVD entry notes a CVSS2 base score of ...

CVE-2017-5199: Incorrect Permission Assignment for Critical Resource

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...