CVE-2019-15766

CVE-2019-15766 affects the KSLABS KSWEB Android app (v3.93). An authenticated attacker can trigger remote code execution by sending a POST to the AJAX handler with configFile (arbitrary file path) and config_text (content to write), potentially writing and executing a PHP file in the device’s pub...

CVE-2019-16198

CVE-2019-16198 affects KSLabs KSWEB 3.93. The issue is a directory traversal in the hostFile parameter handling, enabling an attacker to traverse directories and view system files. Public references across multiple feeds (NVD, CNVD, Red Hat, PRION, CVE records) consistently describe this vulnerab...