29 matches found
Setelsa Security ConacWin CB SQL Injection Vulnerability
Setelsa Security ConacWin CB is an application from Setelsa Security. Setelsa Security ConacWin CB version 3.7.1.2 suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the web interface, which can be exploited by a local attacker to obtain sensitive dat...
Setelsa Conacwin 3.7.1.2 - Local File Inclusion
Exploit Title: Setelsa Conacwin 3.7.1.2 - Local File Inclusion Date: 02/09/20 Exploit Author: Bryan Rodriguez Martin AKA tr3mb0 Vendor Homepage: http://setelsa-security.es/productos/control-de-acceso/ Version: 3.7.1.2 Tested on: Windows FIX: The recommendation from the vendor is to update to the...
CVE-2020-25068
Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal URI. NOTE: The manufacturer indicated that the affect...
CVE-2020-25068
Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal URI. NOTE: The manufacturer indicated that the affect...
CVE-2020-25068
CVE-2020-25068 affects Setelsa Conacwin v3.7.1.2 and is a local file inclusion (LFI) vulnerability allowing an unauthenticated attacker to read internal server files via a directory traversal URI (http://IP:PORT/../../path/file_to_disclose). Public Red Hat/NVD records confirm the issue with that ...
CVE-2020-25068
Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal URI. NOTE: The manufacturer indicated that the affect...
CVE-2020-25068: Improper Limitation of a Pathname to a Restricted Directory
Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal URI. NOTE: The manufacturer indicated that the affect...
PT-2020-15927
Name of the Vulnerable Software and Affected Versions Setelsa Conacwin affected versions not specified Description The issue allows a remote unauthenticated attacker to read internal files on the server via a Directory Traversal URI, such as http://IP:PORT/../../path/file to disclose. The...
