789 matches found
PT-2023-13116 · Boa · Boa
Name of the Vulnerable Software and Affected Versions: Boa affected versions not specified Description: The issue is related to improper input validation, which could lead to a command injection. This might result in remote escalation of privilege without requiring additional execution privileges...
Boa CGI Wapopen Unauthorized Access
The vulnerability in the /cgi-bin/wapopen HTTP-server implementation of Boa is related to incorrect restrictions on the path to the restricted directory during processing of the FILECAMERA variable. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected...
Boa HTTP Server Unauthorized Access
The vulnerabilities of the Boa HTTP server’s files backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js are related to configuration errors. Exploiting these vulnerabilities can allow an attacker operating remotely to gain unauthorized access to protected...
VulnCheck KEV: CVE-2018-20057
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
Authorization
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
Boa 安全漏洞
Boa is an open source code for embedded applications from Boa Open Source. A security vulnerability exists in Boa Web Server versions 0.94.13 through 0.94.14 that stems from an inability to validate the correct security constraints on the HEAD HTTP method, allowing anyone to bypass the basic...
CVE-2022-45956: Incorrect Authorization
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
PT-2022-27698 · Unknown · Boa Web Server
Name of the Vulnerable Software and Affected Versions: Boa Web Server versions 0.94.13 through 0.94.14 Description: The issue allows bypassing of the Basic Authorization mechanism due to a failure in validating the correct security constraint on the HEAD HTTP method. Recommendations: For Boa Web...
CVE-2022-45956
CVE-2022-45956 affects Boa Web Server versions 0.94.13–0.94.14. The HEAD HTTP method is not properly constrained, allowing bypass of Basic Authentication and access to protected resources. Reported in multiple sources (NVD/Red Hat/PT-Security), with a CVSS v3.1 base score of 5.3 (Network, Low att...
Boa SQL Injection Vulnerability
Boa is open source an open source code for embedded applications. A SQL injection vulnerability exists in Boa version 0.94.14rc21. The vulnerability stems from the username parameter not being validated for external input. An attacker can exploit this vulnerability to obtain sensitive database...
CVE-2022-44117
Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with any support for SQL...
CVE-2022-44117
Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with any support for SQL...
CVE-2022-44117
Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with any support for SQL...
