Sibsoft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sibsoft records in CISA KEV

No Sibsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xfilesharing 2 records HIGH Communimail 1 record LOW

Records

3 records

TI-2019-13665 CVE-2019-18952 · GHSA-24p5-6g2r-2gc4

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.

HIGH 71

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44363 Published 2019-11-13 No fix listed CWE-434

TI-2019-13664 CVE-2019-18951 · GHSA-qwjm-gcr8-gjhw

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

MEDIUM 51

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19781 Published 2019-11-13 No fix listed CWE-22

TI-2006-01889 CVE-2006-1944 · GHSA-52fm-3m8p-g9w7

Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and…

LOW 17

Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the list_id parameter in mailadmin.cgi and (2) the form_id…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02154 Published 2006-04-20 No fix listed

Open these records in search →

Critical	1
High	1
Medium	0
Low	1
No CVSS	0