Vulnerabilities > ENS > High

DATE CVE VULNERABILITY TITLE RISK
2019-03-21 CVE-2018-19513 Information Exposure Through Log Files vulnerability in ENS Webgalamb 6.0/7.0
In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames.
network
low complexity
ens CWE-532
7.5
2019-03-21 CVE-2018-19512 Path Traversal vulnerability in ENS Webgalamb 6.0/7.0
In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory.
network
low complexity
ens CWE-22
7.2