28 matches found
CVE-2020-25399
CVE-2020-25399 Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. Information Description: Attacker can send malicious file to any user using chat functional. File may contain js payload, which executes in...
CVE-2020-25398
CVE-2020-25398 Existe una inyección CSV en InterMind iMind Server hasta la versión 3.13.65 a través de la funcionalidad de exportación CSV. Información Descripción: Un atacante puede configurar datos específicos, que podrían exportarse a un archivo csv malicioso con una carga útil de ejecución de...
EUVD-2020-18085
Malware in sbrugna...
EUVD-2020-18086
Malware in sbrugna...
CVE-2020-25399
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...
CVE-2020-25398
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
The vulnerability of iMind video conferencing software lies in its ability to allow the insertion of code or data, enabling a hacker to execute arbitrary code with administrative privileges.
The vulnerability of the iMind video conference software relates to the possibility of code or data being injected into the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with administrative privileges...
The benefits of video conferencing with iMind
By Owais Sultan What is video conferencing? It’s a mode of communication which allows you to conduct meetings with all participants… This is a post from HackRead.com Read the original post: The benefits of video conferencing with iMind...
CVE-2020-25399
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...
CVE-2020-25398
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
CVE-2020-25398
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
Design/Logic Flaw
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
Cross site scripting
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...
CVE-2020-25398
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
CVE-2020-25398
CVE-2020-25398 affects InterMind iMind Server up to version 3.13.65, via the csv export function. The root cause is CSV Injection in exported CSV data. CVSS-3.1 vector indicates Network attack, high impact to confidentiality, integrity, and availability (base 8.8). Practical exploitation details ...
CVE-2020-25399
CVE-2020-25399 affects InterMind iMind Server up to version 3.13.65. The issue is a Stored XSS in the chat file handling that allows any user to hijack another user’s session. Documents do not specify the exact vulnerable component or root cause details beyond the stored XSS in chat. Impact is de...
CVE-2020-25399
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...
PT-2020-16077
Name of the Vulnerable Software and Affected Versions InterMind iMind Server versions through 3.13.65 Description The issue allows any user to hijack another user's session by sending a malicious file in the chat, due to a stored XSS vulnerability. Recommendations For versions through 3.13.65,...
CVE-2020-25399: Improper Neutralization of Input During Web Page Generation
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat...