Search Results | AttackerKB

Show filters

Topics 15 Users 9,713

Clear All

Disclosure Date

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

15 Total Results

Displaying 11-15 of 15

Attacker Value

Unknown

CVE-2019-9616

Disclosure Date: March 06, 2019 (last updated November 27, 2024)

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadScrawl URI.

0

Attacker Value

Unknown

CVE-2019-9617

Disclosure Date: March 06, 2019 (last updated November 27, 2024)

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadFile URI.

0

Attacker Value

Unknown

CVE-2019-9612

Disclosure Date: March 06, 2019 (last updated November 27, 2024)

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/upload URI.

0

Attacker Value

Unknown

CVE-2019-9613

Disclosure Date: March 06, 2019 (last updated November 27, 2024)

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadVideo URI.

0

Attacker Value

Unknown

CVE-2019-9609

Disclosure Date: March 06, 2019 (last updated November 27, 2024)

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/editUploadImage URI.

0