Tobias

An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the software. This allows access to files or directories outside of the intended restricted folder.

An authorization issue exists in WebinarIgnition, allowing exploitation of incorrectly configured access control security levels.

The issue is an unauthenticated remote code execution vulnerability that can be triggered by an HTTP endpoint exposed to the network.

The issue affects devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" and allows for the leakage of the database, including system settings and user accounts. This can be triggered by an HTTP endpoint exposed to the network.

The issue is related to an origin bypass via the host header in an HTTP request. This can be triggered by an HTTP endpoint exposed to the network.

The issue allows remote attackers to bypass intended per-title read restrictions. This is achieved via a parse action to the "api.php" endpoint.

The issue is related to multiple race conditions that can be exploited by remote authenticated users. This can happen in opportunistic circumstances by leveraging the lack of thread safety. The exploitation can occur through a rapid series of operations, such as mail-sending or draft-saving. This allows attackers to read the private e-mail of other persons.