5 matches found
CVE-2019-16314
Indexhibit 2.1.5 is vulnerable to remote code execution via the installer, exposed through /ndxzstudio/install.php?p=2. The vulnerability is documented in multiple sources (NVD, CNVD, Red Hat) with the same description, indicating that a product reinstallation can be abused to execute code remote...
PT-2019-14623
Name of the Vulnerable Software and Affected Versions Indexhibit version 2.1.5 Description The issue allows for a product reinstallation, which can result in remote code execution. This can be achieved via the "/ndxzstudio/install.php?p=2" API endpoint. Recommendations For Indexhibit version 2.1....
Design/Logic Flaw
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...
CVE-2019-8954: Improper Input Validation
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...
PT-2019-19280
Name of the Vulnerable Software and Affected Versions Indexhibit version 2.1.5 Description The issue allows remote attackers to execute arbitrary code. This can be achieved by exploiting the v parameter in conjunction with the id parameter when a upd jxcode=true action is sent to the...