Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Netwin Subscribe
Filtered by product Surgeldap
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-2253 1 Netwin 1 Surgeldap 2017-07-10 5.0 MEDIUM N/A
Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a .. in the page parameter of the show command.
CVE-2004-2254 1 Netwin 1 Surgeldap 2017-07-10 7.5 HIGH N/A
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.