EDB-40863

functional

Microsoft Event Viewer 1.0 - XML External Entity Injection

view exploit source exploit_dbverifiedtype localauthor hyp3rlinxpublished 2016-12-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-0948USmedium4.3Exploit
An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attac…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan