← Back

Download Master

download_master

Vendor: Asus • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Asus
1Download Master
Nov 21, 2024
Jun 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload...Show more
The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload malicious web page files to the website directory, allowing arbitrary system commands to be executed upon browsing the webpage.Show less
1Asus
1Download Master
Nov 21, 2024
Jun 14, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site sc...Show more
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site scripting attacks.Show less
1Asus
1Download Master
Nov 21, 2024
Jun 14, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Reflected Cross-site...Show more
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks.Show less