Ksweb

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-16198 Oct 03, 21:15 MEDIUM POC This Month

KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Ksweb

NVD

CVSS 3.1

6.5

EPSS

1.6%

CVE-2019-15766 Oct 03, 21:15 HIGH POC This Week

The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Google File Upload Ksweb

NVD

CVSS 3.1

8.8

EPSS

3.1%

CVE-2019-16198

EPSS 2% CVSS 6.5

MEDIUM POC This Month

Path Traversal Ksweb

NVD

CVE-2019-15766

EPSS 3% CVSS 8.8

HIGH POC This Week

PHP RCE Google +2

NVD