Vulnerabilities > Kslabs
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-10-03 | CVE-2019-16198 | Path Traversal vulnerability in Kslabs Ksweb 3.93 KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter. | 6.5 |
| 2019-10-03 | CVE-2019-15766 | Unrestricted Upload of File with Dangerous Type vulnerability in Kslabs Ksweb 3.93 The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to (and the config_text parameter set to the content of the file to be created). | 8.8 |