CVE-2019-16716

creationtimestamp| type| source ---|---|--- 2024-03-19 16:07:06+00:00| seen| https://t.me/ctinow/211654...

CVE-2020-16716

...

CVE-2020-16716

CVE-2020-16716 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-16716

OX App Suite through 7.10.2 has Incorrect Access Control...

CVE-2019-16716

OX App Suite through 7.10.2 has Incorrect Access Control...

CVE-2019-16716

Open-Xchange OX App Suite (backend) is affected through version 7.10.2 and earlier, with an Incorrect Access Control issue and related Cross‑Site Scripting vulnerability described in PACKETSTORM. The vulnerability could allow script injection when PNG attachments are manipulated and a specific UR...

OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...

CVE-2018-16716

Summary of CVE-2018-16716 Affected software: NCBI ToolBox legacy versions 2.0.7 through 2.2.26. Vulnerability: Path traversal via viewcgi.cgi (and potential file deletion via nph-viewgif.cgi), enabling reading of arbitrary server files and significant information disclosure. Root cause (per sourc...

Advantech WebAccess 8.3 - SQL Injection

Advantech WebAccess 8.3 - SQL Injection !/usr/bin/python2.7 Exploit Title: Advantech WebAccess BWSCADARest Login Method SQL Injection Authentication Bypass Vulnerability Date: 01-13-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

Advantech WebAccess < 8.3 - SQL Injection

!/usr/bin/python2.7 Exploit Title: Advantech WebAccess BWSCADARest Login Method SQL Injection Authentication Bypass Vulnerability Date: 01-13-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

CVE-2017-16716

A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands...

CVE-2017-16716

A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands...

CVE-2017-16716

Advantech WebAccess prior to version 8.3 is affected by a SQL Injection vulnerability (CVE-2017-16716) caused by inadequate input sanitization. A remote attacker could exploit this to execute arbitrary code in the WebAccess service. Public PoCs and advisories (ZDI-18-065, Exploit-DB listing) desc...

Advantech WebAccess (Update A)

CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Path Traversal, SQL Injection, Improper Input Validation. UPDATE INFORMATION This updated advisory is a...