Browse CVEs

CRITICAL 9.8 CVE-2022-45896 Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx ca… Planet Estream 6.72.10.07+ Fix from $2,3002022-12-25 HIGH 8.8 CVE-2022-45893 Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the valu… Planet Estream 6.72.10.07+ Fix from $1,9502022-12-25 MEDIUM 6.5 CVE-2022-45894 GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal to read arbitrary local files. Planet Estream 6.72.10.07+ Fix from $1,6002022-12-25 MEDIUM 6.5 CVE-2022-45895 Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some sit… Planet Estream 6.72.10.07+ Fix from $1,6002022-12-25 CRITICAL 9.1 CVE-2022-45891 Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content … Planet Estream 6.72.10.07+ Fix from $2,3002022-12-25 MEDIUM 6.1 CVE-2022-45890 In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting (XSS) vulnerability exists via any metadata filter field (e.g., search within D… Planet Estream 6.72.10.07+ Fix from $1,6002022-12-25 MEDIUM 5.4 CVE-2022-45892 In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS) vulnerabilities exist: Disclaimer, Search Function, Comments, Batch e… Planet Estream 6.72.10.07+ Fix from $1,6002022-12-25 HIGH 7.2 CVE-2022-45889 Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records stored in the database, and a… Planet Estream 6.72.10.07+ Fix from $1,9502022-12-25