CVE-2018-13980 (zeta_producer)

Leave a reply

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal.

View Full Alert

Related Posts

  • CVE-2018-17792

    MDaemon Webmail (formerly WorldClient) has CSRF. View Full Alert

  • CVE-2018-14919

    LOYTEC LGATE-902 6.3.2 devices allow XSS. View Full Alert

  • CVE-2018-14918

    LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal. View Full Alert

Leave a Reply