EUVD-2019-8890

Malware in sbrugna...

Simplifile RecordFusion Information Disclosure Vulnerability

Simplifile RecordFusion is an electronic records service system from Simplifile, Inc. in the United States. A security vulnerability exists in Simplifile RecordFusion 2019-11-25 and prior versions. A remote attacker can exploit logger/logs?/... / or logger/hist?/... / URI to access local files...

CVE-2019-19264

In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI...

CVE-2019-19264

In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI...

Design/Logic Flaw

In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI...

CVE-2019-19264

CVE-2019-19264 affects Simplifile RecordFusion up to 2019-11-25. The vulnerability is a local-file disclosure via logger/logs?/../ or logger/hist?/../ URIs in the logs and hist parameters, enabling remote attackers to access local files. The NVD lists CVSS2/3.1 base scores of 5.0 (medium) and 7.5...

CVE-2019-19264

In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI...