3 results · Clear filters · Feed
-
Medium 6.5
GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client
GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The web_tools_cmd() function constructs an iperf command using the server and options parameters without sanitization, permitting in…
-
Medium 6.5
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler
GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the diagnostic file deletion handler. The unlink_or_email_file() function accepts parameters prefixed with v_file_row_ and appends their values directly to a base directory pa…
-
Medium 4.9
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler
GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the system maintenance configuration download handler. The wcf_handle_download() function accepts parameters prefixed with v_del_ and appends their values directly to the base…