PT-2026-68892 · Teamdavid · Teamdavid
CVSS v4.0
8.4
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H |
Name of the Vulnerable Software and Affected Versions
TeamDavid versions prior to Rollout 525
Description
The send email, fax, and SMS functionality allows for arbitrary file deletion. An attacker can delete any file on the system by specifying an @@COMMENTFILE command within the
scjob form field.Recommendations
Update TeamDavid to a version later than Rollout 524.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Teamdavid