Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2018-12312
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL parameter.
0
Attacker Value
Unknown
CVE-2018-12314
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Directory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to download arbitrary files by manipulating the "file" and "folder" URL parameters.
0
Attacker Value
Unknown
CVE-2018-12306
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344.
0
Attacker Value
Unknown
CVE-2018-12308
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain the encryption key via the "encrypt_key" URL parameter.
0
Attacker Value
Unknown
CVE-2018-12310
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature.
0
