TI-2021-15372 CVE-2021-37442 · GHSA-83w5-49r2-whcp
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/..
Priority LOW 31
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/..
Vulnerabilities
7 records
TI-2021-15373 CVE-2021-37443 · GHSA-98ff-8p4p-47qw
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
Priority LOW 38
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
TI-2021-15374 CVE-2021-37444 · GHSA-jxmw-mmc4-3375
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon…
Priority MEDIUM 42
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive.
TI-2021-15378 CVE-2021-37448 · GHSA-wmhm-6wjf-7hp9
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
Priority LOW 25
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
TI-2021-15379 CVE-2021-37449 · GHSA-w674-wrgq-h24p
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
Priority LOW 25
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
TI-2021-15380 CVE-2021-37450 · GHSA-f33j-wqvh-v747
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
Priority LOW 25
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
TI-2021-15381 CVE-2021-37451 · GHSA-hwg2-xqqq-h8xm
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).
Priority LOW 25
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).