Show filters
43 Total Results
Displaying 21-30 of 43
Sort by:
Attacker Value
Unknown
CVE-2018-12305
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript.
0
Attacker Value
Unknown
CVE-2018-12316
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter.
0
Attacker Value
Unknown
CVE-2018-12312
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL parameter.
0
Attacker Value
Unknown
CVE-2018-12306
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344.
0
Attacker Value
Unknown
CVE-2018-12314
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Directory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to download arbitrary files by manipulating the "file" and "folder" URL parameters.
0
Attacker Value
Unknown
CVE-2018-12308
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain the encryption key via the "encrypt_key" URL parameter.
0
Attacker Value
Unknown
CVE-2018-12310
Disclosure Date: December 04, 2018 (last updated November 27, 2024)
Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature.
0
Attacker Value
Unknown
CVE-2018-15697
Disclosure Date: August 27, 2018 (last updated November 27, 2024)
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path. For example, /home/admin/.ash_history.
0
Attacker Value
Unknown
CVE-2018-15696
Disclosure Date: August 27, 2018 (last updated November 27, 2024)
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.
0
Attacker Value
Unknown
CVE-2018-15698
Disclosure Date: August 27, 2018 (last updated November 27, 2024)
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.
0
