Логотип exploitDog
bind:CVE-2019-14466
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-14466

Количество 4

Количество 4

ubuntu логотип

CVE-2019-14466

около 6 лет назад

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2019-14466

около 6 лет назад

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2019-14466

около 6 лет назад

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-x55p-vmqf-hfxg

больше 3 лет назад

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-14466

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

CVSS3: 6.5
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-14466

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

CVSS3: 6.5
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-14466

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable ...

CVSS3: 6.5
0%
Низкий
около 6 лет назад
github логотип
GHSA-x55p-vmqf-hfxg

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу