Posts with tag authenticated

2 posts

Also available in:

CVE-2022-29710 - LimeSurvey - XSS with plugin upload in uploadConfirm.php

LimeSurvey v5.3.9 and below allows attackers to include javascript or HTML code in the config.xml file of a plugin.

authenticated cve xss

May 25, 2022
CVE-2020-16148 - Telmat - Authenticated root RCE

An authenticated code injection on the Administration avancee (Advanced administration) page of Telmat AccessLog, Git@Box and Educ@Box with software version <= 6.0 (TAL_20180415) allows Remote Code Execution (RCE) as root.

authenticated cve remote-code-execution

September 20, 2020