20 matches found
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
EUVD-2019-10937
Malware in sbrugna...
EUVD-2020-18776
Malware in sbrugna...
CVE-2020-26150
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
Logaritmo Aware CallManager Information Disclosure Vulnerability
Logaritmo Aware CallManager is an enterprise telephone call management system. A security vulnerability exists in Logaritmo Aware CallManager version 2012, which originates in info.php and allows remote attackers to obtain sensitive information via a direct request to the phpinfo function...
CVE-2020-26150
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
CVE-2020-26150
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
Information disclosure
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
CVE-2020-26150
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
CVE-2020-26150
CVE-2020-26150 affects Logaritmo Aware CallManager 2012. The issue originates in info.php, where a direct request invoking phpinfo discloses sensitive information to remote attackers. The vulnerability is an information-disclosure flaw; exploitation details and concrete fixes are not provided in ...
CVE-2020-26150: Direct Request
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
PT-2020-16312
Name of the Vulnerable Software and Affected Versions Logaritmo Aware CallManager 2012 Description The issue allows remote attackers to obtain sensitive information via a direct request to 'info.php', which calls the phpinfo function. Recommendations For Logaritmo Aware CallManager 2012, consider...
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
Design/Logic Flaw
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
CVE-2019-20385
CVE-2019-20385 affects Logaritmo Aware CallManager 2012 devices. The vulnerability arises from the CSV upload feature in /supervisor/procesa_carga.php, which allows uploading of .php files with a text/* content type. The uploaded PHP code can then be executed by accessing /supervisor/csv/. Red Ha...
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
PT-2020-10412
Name of the Vulnerable Software and Affected Versions Logaritmo Aware CallManager 2012 Description The issue concerns the CSV upload feature in the /supervisor/procesa carga.php file, which allows the upload of .php files with a text/ content type. The uploaded PHP code can then be executed by...
CVE-2019-20385: Unrestricted Upload of File with Dangerous Type
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
Unspecified Vulnerability in Logaritmo Aware CallManager
Logaritmo Aware CallManager is an enterprise telephone call management system. A security vulnerability exists in the CSV upload feature of the /supervisor/procesacarga.php file in the 2012 version of Logaritmo Aware CallManager, which can be exploited by an attacker accessing the /supervisor/csv...