Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Progress Subscribe
Filtered by product Webspeed Messenger
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-2354 1 Progress 1 Webspeed Messenger 2018-10-16 7.8 HIGH N/A
Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a WService parameter containing "wsbroker1/webutil/about.r", which reveals the operating system and product information.
CVE-2007-2266 1 Progress 1 Webspeed Messenger 2018-10-16 10.0 HIGH N/A
Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyfile.p in the WService parameter to (1) cgiip.exe or (2) wsisa.dll in scripts/, as demonstrated by using the save,editor options to create a new file using the fileName parameter.