CVE-2021-37447
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
Vendor/product archive
nchsoftware / quorum CVEs
Beta · best-effort8 CVEs tagged to nchsoftware / quorum — 0 Critical, 1 High, 7 Medium, 0 Low, 0 Unrated.
CVE-2021-37446
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
CVE-2021-37445
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
CVE-2021-37467
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
CVE-2021-37466
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
CVE-2021-37465
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
CVE-2021-37464
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
CVE-2021-37463
Published Jul 25, 2021In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
Showing 1-8 of 8 CVEsPage 1 of 1