الباحثون
رجوع
Alm4Ric
#12441
من 60,596
25.8
إجمالي CVSS
الثغرات
·
4
متوسطة
2
عالية
2
PT-2019-15549
2019-11-14
7.2
CVE-2019-18646
Untangle
Untangle Ng Firewall
The issue concerns authenticated inline-query SQL injection. It occurs within the `timeDataDynamicColumn` parameter when a user is logged in as an admin.
PT-2019-15550
2019-11-14
9.0
CVE-2019-18647
Untangle
Untangle Ng Firewall
The issue allows for an authenticated command injection when an admin user is logged in.
PT-2019-15551
2019-11-14
4.8
CVE-2019-18648
Untangle
Untangle Ng Firewall
The issue allows for reflected XSS attacks when logged in as an admin user, affecting multiple places and specific user input fields.
PT-2019-15552
2019-11-14
4.8
CVE-2019-18649
Untangle
Untangle Ng Firewall
The issue concerns a stored XSS vulnerability in the Title input field under Reports when an admin user is logged in.