Vulnerabilities

TI-2024-25567 CVE-2024-38289

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in…

HIGH 75

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40609 Published 2024-07-25 No fix listed CWE-89

TI-2024-25566 CVE-2024-38288

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB…

HIGH 67

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary commands on the underly…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03189 Published 2024-07-25 No fix listed CWE-77

TI-2024-25565 CVE-2024-38287

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting…

HIGH 82

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's password to a random…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00544 Published 2024-07-25 No fix listed CWE-640

Vulnerabilities

Filters

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in…

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB…

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting…