CVE-2018-14908

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action...

CVE-2018-14904

CVE-2018-14904 affects Samsung Syncthru Web Service version 4.05.61. Multiple unauthenticated Cross-Site Scripting (XSS) vulnerabilities exist in several parameters, enabling injection of arbitrary web script or HTML. Documented in multiple sources (NVD entry and CNVD/OPENVAS references) with no ...

CVE-2018-14908

CVE-2018-14908 affects Samsung Syncthru Web Service v4.05.61. Multiple connected sources confirm a cross-site request forgery (CSRF) vulnerability that allows unauthorized operations on the web service, reportedly demonstrated via the sws.application/printinformation/printReportSetupView.sws endp...

CVE-2018-14908

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action...

CVE-2018-14904

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFwpid...