cve/2019/CVE-2019-18641.md

CVE-2019-18641

Description

Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.

POC

Reference

• http://packetstormsecurity.com/files/160766/Rock-RMS-File-Upload-Account-Takeover-Information-Disclosure.html
• http://packetstormsecurity.com/files/160766/Rock-RMS-File-Upload-Account-Takeover-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2021/Jan/1
• http://seclists.org/fulldisclosure/2021/Jan/1

Github

• https://github.com/ARPSyndicate/cvemon