8 matches found
CVE-2024-24525
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL...
CVE-2024-24525
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL...
CVE-2024-24525
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL...
Code injection
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL...
EpointWebBuilder Security Vulnerability
EpointWebBuilder is an application from Chinese company Epoint. A security vulnerability exists in EpointWebBuilder that originates from allowing an attacker to execute arbitrary code via the infoid parameter of a URL. Affected products and versions: EpointWebBuilder version 5.1.0-sp1, 5.2.1-sp1,...
CVE-2024-24525
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL...
CVE-2024-24525
An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL...
CVE-2024-24525
CVE-2024-24525—EpointWebBuilder remote code execution : The issue affects EpointWebBuilder versions 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2. A vulnerability in the infoid URL parameter allows a remote attacker to execute arbitrary code. The CVSSv3.1 score is 9.8 (CRITICAL) with NETWORK attack vecto...