CVE-2019-19988

HIGH

Selesta Visual Access Manager 4.15.0-4.29.0 - Authenticated Arbitrary File Write via /common/vam_editXml.php

Title source: llm
STIX 2.1

Description

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the file name to be created, the destination path, or the extension. Thus, an attacker can manipulate the file name to create any type of file within the filesystem with arbitrary content.

References (3)

Core 3
Core References
Product x_refsource_misc
https://www.seling.it/
Product, Vendor Advisory x_refsource_misc
https://www.seling.it/product/vam/

Scores

CVSS v3 8.8
EPSS 0.0146
EPSS Percentile 70.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
seling/visual_access_manager 4.15.0 - 4.29.0
Published Feb 26, 2020
Tracked Since Feb 18, 2026