CVE-2018-19514

CVE-2018-19514 affects Webgalamb up to version 7.0 and enables remote arbitrary code execution. An authentication bypass is required to access admin features to upload a crafted CSV payload that becomes part of a PHP eval() expression in subscriber.php. The connected records corroborate this desc...

CVE-2018-19509

CVE-2018-19509 affects Webgalamb 7.0 (wg7.php) where a templating engine with proper contextual encoding is not used, and htmlspecialchars() is used opportunistically. Root cause: insufficient contextual encoding, allowing insertion of arbitrary strings into the database, which could enable JavaS...

CVE-2018-19512

CVE-2018-19512 affects Webgalamb up to version 7.0. The vulnerability is a directory traversal in system/ajax.php (wgmfile restore) that can lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root. Affected product: Webgalamb (...

CVE-2018-19510

Webgalamb is affected by CVE-2018-19510 where subscriber.php (Webgalamb up to version 7.0) is vulnerable to SQL injection via the Client-IP HTTP header. The issue originates from insufficient validation of externally supplied SQL statements in the database layer, enabling an attacker to influence...

CVE-2018-19513

Webgalamb (up to v7.0) exposes log files at predictable paths (logs/sql_error_log/YYYY-MM-DD-sql_error_log.log) via the internet. These files may contain sensitive client data (e.g., email addresses) and can facilitate exploitation of SQL injection errors. Affected entries include CVE-2018-19513 ...

CVE-2018-19515

CVE-2018-19515 affects Webgalamb up to version 7.0. The issue: system/ajax.php endpoints intended for admin use can be accessed by unauthenticated users via certain query parameters (e.g., bgsend, atment_sddd1xGz, xls_bgimport), enabling broad method exposure. This is described as an information-...

CVE-2018-19511

CVE-2018-19511 concerns Webgalamb 7.0 where wg7.php lacks CSRF protections, demonstrated by using wg7.php?options=1 to change the administrator password. The Red Hat and NVD/NVD-linked records corroborate a CSRF flaw affecting Webgalamb, with no explicit exploit details or patch/version fixes pro...