Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2023-51948

Disclosure Date: January 19, 2024 (last updated January 26, 2024)
A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application.
Attacker Value
Unknown

CVE-2023-51947

Disclosure Date: January 19, 2024 (last updated January 26, 2024)
Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.
Attacker Value
Unknown

CVE-2023-51946

Disclosure Date: January 19, 2024 (last updated January 26, 2024)
Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML.