3 matches found
CVE-2019-11232
EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...
9.8CVSS9.3AI score0.01533EPSS
SaveExploits1References1
CVE-2019-11232
EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...
9.3AI score0.01533EPSS
SaveExploits1References1
CVE-2019-11232: Improper Authentication
EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...
9.8CVSS5.7AI score0.01533EPSS
SaveExploits1References2
20