{"vulnerability": "cve-2019-1928", "sightings": [{"uuid": "384c711e-2b20-49e0-998e-25bfe01c7098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19285", "type": "seen", "source": "https://t.me/cibsecurity/20788", "content": "\u203c CVE-2019-19285 \u203c\n\nA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could lead to XSS attacks if unsuspecting users are tricked into accessing a malicious link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T00:39:36.000000Z"}, {"uuid": "c0fc7c06-08a0-4c64-9a6a-55fbb3bf4c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19289", "type": "seen", "source": "https://t.me/cibsecurity/20787", "content": "\u203c CVE-2019-19289 \u203c\n\nA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T00:39:35.000000Z"}, {"uuid": "d9e42fa3-9d67-4513-9d14-a9bef140366a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19286", "type": "seen", "source": "https://t.me/cibsecurity/20782", "content": "\u203c CVE-2019-19286 \u203c\n\nA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if an attacker is able to modify content of particular web pages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T00:39:26.000000Z"}, {"uuid": "a23d10f4-1bd9-4587-81fe-4a11972bd691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19287", "type": "seen", "source": "https://t.me/cibsecurity/20779", "content": "\u203c CVE-2019-19287 \u203c\n\nA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T00:39:23.000000Z"}, {"uuid": "1e50f0ea-d073-4665-a2ce-5fb0d41d9bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19284", "type": "seen", "source": "https://t.me/cibsecurity/20792", "content": "\u203c CVE-2019-19284 \u203c\n\nA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T00:39:40.000000Z"}, {"uuid": "85011b14-99c7-433a-9b00-06d4f0f37dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19283", "type": "seen", "source": "https://t.me/cibsecurity/20791", "content": "\u203c CVE-2019-19283 \u203c\n\nA vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T00:39:39.000000Z"}]}