EUVD-2019-2931

Malware in sbrugna...

CVE-2019-11232

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...

PT-2019-12207

Name of the Vulnerable Software and Affected Versions EXCELLENT INFOTEK BiYan versions 1.57 through 2.8 Description The issue allows an attacker to leak user information without authentication by sending a LOGIN ID element to the "auth/main/asp/check user login info.aspx" API endpoint and then...

PT-2019-12206

Name of the Vulnerable Software and Affected Versions EXCELLENT INFOTEK BiYan versions 1.57 through 2.8 Description The issue allows an attacker to leak user information, specifically passwords, without authentication. This is achieved by sending an EMP NO element to the "kws login/asp/query...

CVE-2019-11233: Exposure of Sensitive Information to an Unauthorized Actor

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGINID element to the auth/main/asp/checkuserlogininfo.aspx URI, and then reading the response, as demonstrated by the KWEMAIL or KWTEL field...

CVE-2019-11232: Improper Authentication

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...