CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

CVE-2021-37446

Summary: CVE-2021-37446 affects NCH Quorum v2.03 and earlier, where an authenticated user can perform directory traversal via the parameter documentprop?file=/.. to read files. This is a path traversal flaw that could expose sensitive files on the remote system. Other connected sources reiterate ...

CVE-2021-37447

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...

CVE-2021-37447

CVE-2021-37447 concerns NCH Quorum v2.03 and earlier. An authenticated user can perform directory traversal via the parameter documentdelete?file=/.., enabling file deletion on the affected system. The core issue is a path traversal in a function responsible for file deletion, allowing access bey...

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

CVE-2021-37452

CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...

CVE-2021-37463

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

CVE-2021-37463

CVE-2021-37463 affects NCH Quorum v2.03 and earlier, with a stored XSS in the User Display Name. The root cause is a script injection that is stored and rendered in the user display context. Impact stated in CNVD/CNNVD references describes attackers potentially stealing cookie‑based authenticatio...

CVE-2021-37464

CVE-2021-37464 affects NCH Quorum v2.03 and earlier, with a stored XSS via the Conference Description. Reported across multiple sources (CNVD/CNNVD, Red Hat, NVD, CVE lists). The vulnerability allows injection into the Conference Description field, enabling XSS which can lead to cookie-based auth...

CVE-2021-37464

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...

CVE-2021-37465

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...

CVE-2021-37465

CVE-2021-37465 affects NCH Quorum v2.03 and earlier. The vulnerability is a reflected XSS via the /uploaddoc?id= parameter, as described by NVD/CNVD/CNNVD/Red Hat entries. The connected documents confirm the affected product/version and attack vector; no remediation details are provided in the do...

CVE-2021-37466

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...

CVE-2021-37466

CVE-2021-37466 affects NCH Quorum v2.03 and earlier, with a reflected cross-site scripting (XSS) vulnerability via /conference?id= . The cited sources consistently describe XSS in these versions; no exploit details or mitigations are provided in the connected documents. If remediation exists, it ...

CVE-2021-37467

CVE-2021-37467 affects NCH Quorum v2.03 and earlier. It describes a reflected cross-site scripting (XSS) vulnerability that occurs via the parameter confid in the URL /conferencebrowseuploadfile?confid=. The root cause, as stated, is improper handling/unsanitized user input, leading to client-sid...

CVE-2021-37467

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= reflected...

NCH Quorum 跨站脚本漏洞

NCH Quorum is software that runs as a teleconferencing server on a Windows PC. A cross-site scripting vulnerability exists in NCH Quorum 2.03 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via /conference?id=...

NCH Quorum 路径遍历漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...

NCH Quorum 跨站脚本漏洞

NCH Quorum is software that runs as a teleconferencing server on a Windows PC. A cross-site scripting vulnerability exists in NCH Quorum 2.03 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via /uploaddoc?id=...

NCH Quorum 访问控制错误漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. An information disclosure vulnerability exists in NCH Quorum, which stems from the fact that the product does not add valid permissions for access to the local .dat file, which could be exploit...