Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2019-18924

Disclosure Date: November 12, 2019 (last updated November 27, 2024)
Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.
Attacker Value
Unknown

CVE-2019-18925

Disclosure Date: November 12, 2019 (last updated November 27, 2024)
Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.