Vulnerabilities > CVE-2018-1000515 - XXE vulnerability in News-Articles Project News-Articles 00.09.11
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles/API/MetaWebLog/Handler.ashx.vb that can result in Attacker can read any file in the server or use smbrelay attack to access to server..
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |