CVE-2017-9095

Summary

XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://thenopsled.com/divinglog.txt
• https://www.exploit-db.com/exploits/43187/

References

• https://thenopsled.com/divinglog.txt
• https://www.exploit-db.com/exploits/43187/

• ←Previous
• Next→