Francisco Javier Santiago Vázquez

A vulnerabilidade permite o acesso a diretórios (Directory Traversal) por meio do endpoint da API `advanced component system/index.php`, especificamente através da variável `ACS path`. Isso pode ser explorado manipulando a variável `ACS path` com um URI como `..%2f`.

Name of the Vulnerable Software and Affected Versions: SyncBreeze versions 10.1 through 10.7 Description: The issue is an XSS that affects SyncBreeze. Recommendations: For versions 10.1 through 10.7, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: DiskPulse Enterprise versions 10.4 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 10.4 through 10.7, update to a version later than 10.7 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: DiskSavvy Enterprise versions 10.4 through 10.7 Description: A cross-site scripting (XSS) issue exists. Recommendations: For versions 10.4 through 10.7, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: DiskBoss Enterprise versions 7.4.28 through 9.1.16 Description: The issue is related to a Cross-Site Scripting (XSS) problem. Recommendations: For versions 7.4.28 through 9.1.16, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Flexense VX Search Enterprise versions 10.1.12 through 10.7 Description: A cross-site scripting (XSS) issue exists. Recommendations: For versions 10.1.12 through 10.7, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: DiskSorter Enterprise versions 9.5.12 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 9.5.12 through 10.7, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Flexense DupScout Enterprise versions 10.0.18 through 10.7 Description: A cross-site scripting issue exists. Recommendations: For versions 10.0.18 through 10.7, update to a version that contains a fix for this issue.