CVE-2012-5190

Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability...

Prizm Content Connect v10.5.1030.8315 - XXE Vulnerability

Exploit Title: Prizm Content Connect v10.5.1030.8315 - XXE Exploit Author: @xhzeem Vendor Homepage: https://help.accusoft.com/PCC/v9.0/HTML/About%20Prizm%20Content%20Connect.html Version: v10.5.1030.8315 The Prizm Content Connect v10.5.1030.8315 is vulnerable to XXE Proof Of Concept:...

Prizm Content Connect v10.5.1030.8315 - XXE

Exploit Title: Prizm Content Connect v10.5.1030.8315 - XXE Date: 21/12/2022 Exploit Author: @xhzeem Vendor Homepage: https://help.accusoft.com/PCC/v9.0/HTML/About%20Prizm%20Content%20Connect.html Version: v10.5.1030.8315 The Prizm Content Connect v10.5.1030.8315 is vulnerable to XXE Proof Of...

CVE-2012-5190

Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability...

CVE-2012-5190

Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability...

CVE-2012-5190

CVE-2012-5190 concerns Prizm Content Connect 5.1, which is vulnerable to an arbitrary file upload in the web document viewer. The root cause is the handling of a document parameter (default.aspx) that can download a remote file and save it to the server, enabling an attacker to place a crafted fi...

Prizm Content Connect default.aspx document Parameter Remote File Inclusion

The remote web server hosts Prizm Content Connect, a fully customizable document viewer. The 'default.aspx' script included with the install fails to sanitize user input to the 'document' parameter before reading a file. A remote attacker can leverage this issue to view arbitrary files or execute...

Arbitrary File Upload and Code Execution in Accusoft Prizm Content Connect

In the course of our security assessment consulting we often find 0day vulnerabilities and report them to vendors. In this particular case the vendor has unfortunately shown a general disregard for the security risk of this uncovered vulnerability which was originally disclosed privately to them ...

Prizm Content Connect Code Execution

In the course of our security assessment consulting we often find 0day vulnerabilities and report them to vendors. In this particular case the vendor has unfortunately shown a general disgregard for the security risk of this uncovered vulnerability which was originally disclosed privately to them...

Prizm Content Connect - Arbitrary File Upload

Prizm Content Connect - Arbitrary File Upload source: https://www.securityfocus.com/bid/57242/info Prizm Content Connect is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may leverage this issue to upload arbitrary...

Prizm Content Connect - Arbitrary File Upload

source: https://www.securityfocus.com/bid/57242/info Prizm Content Connect is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can resul...