Ozeki Ozeki Ng Sms Gateway
11 CVEs affecting Ozeki Ozeki Ng Sms Gateway. Latest disclosed: 2020-09-30. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14026 | High | 8.8 | 2020-09-22 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that… |
CVE-2020-14025 | High | 8.8 | 2020-09-22 | Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted… |
CVE-2020-14022 | High | 8.8 | 2020-09-22 | Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file. It is p… |
CVE-2020-14029 | High | 7.5 | 2020-09-18 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe manner. This opens the application to an… |
CVE-2020-14030 | High | 7.2 | 2020-09-30 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating (and writing… |
CVE-2020-14031 | High | 7.2 | 2020-09-22 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folde… |
CVE-2020-14028 | High | 7.2 | 2020-09-22 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker… |
CVE-2020-14024 | Medium | 6.1 | 2020-09-22 | Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient field in the Mailb… |
CVE-2020-14027 | Medium | 5.3 | 2020-09-22 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENABLE_LOCAL_INFILE, th… |
CVE-2020-14023 | Medium | 4.9 | 2020-09-22 | Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS. |
CVE-2020-14021 | Medium | 4.9 | 2020-09-18 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By alteri… |