CVE-2020-5519

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...

PT-2020-18494

Name of the Vulnerable Software and Affected Versions OpenLiteSpeed versions prior to 1.6.5 Description The issue concerns the WebAdmin Console, which does not strictly check request URLs. This is demonstrated by the "Server Configuration External App" screen, indicating a potential weakness in h...

CVE-2020-5519: Improper Input Validation

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...

The vulnerability of the NGINX component of the SoftNAS Cloud storage solution allows a hacker to gain unauthorized access to the Webadmin interface.

The vulnerability of the NGINX component of the SoftNAS Cloud storage solution is related to insufficient checking of arguments passed in the command. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the Webadmin interface...

CVE-2019-15516

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...

CVE-2019-15516

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...

Directory traversal

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...

CVE-2019-15516

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...

CVE-2019-15516

CVE-2019-15516 concerns Cuberite prior to 2019-06-11. The vulnerability is a webadmin directory traversal caused by a flawed protection check that only removes a single “../” substring, potentially allowing an attacker to access locations outside a restricted directory. The description provides n...

CVE-2019-15516

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...

CVE-2019-15516: Improper Limitation of a Pathname to a Restricted Directory

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...

PT-2019-14238

Name of the Vulnerable Software and Affected Versions Cuberite versions prior to 2019-06-11 Description The issue allows directory traversal in the webadmin directory via ../ sequences because the protection mechanism only removes one ../ substring. Recommendations For versions prior to 2019-06-1...

CVE-2019-14495

webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface...

CVE-2019-14495

CVE-2019-14495 affects 3proxy’s webadmin.c component, where the admin interface exposes an out-of-bounds write in versions prior to 0.8.13. The vulnerability is rooted in an out-of-bounds write condition within the webadmin interface, with potential impact on confidentiality, integrity, and avail...

PT-2019-13721 · 3Proxy +1 · 3Proxy +1

Name of the Vulnerable Software and Affected Versions: 3proxy versions prior to 0.8.13 Description: The issue is related to an out-of-bounds write in the admin interface of the webadmin.c component. Recommendations: For versions prior to 0.8.13, update to version 0.8.13 or later to resolve the...

OpenDreamBox WebAdmin Plugin Remote Code Execution

A remote code execution vulnerability exists in OpenDreamBox WebAdmin Plugin . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VulnCheck KEV: CVE-2017-14135

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI...

CVE-2019-9945

SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid...

Default configuration

SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid...

PT-2019-4262

Name of the Vulnerable Software and Affected Versions SoftNAS Cloud versions 4.2.0 through 4.2.1 Description The issue is related to the NGINX default configuration file, which has an inadequate check for a user cookie. This allows an attacker to provide an arbitrary value for the cookie and acce...