CVE-2020-16152

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...

CVE-2020-16152

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...

CVE-2020-16152

The CVE-2020-16152 entry refers to Aerohive/Extreme Networks HiveOS NetConfig, where the NetConfig UI is vulnerable to local file inclusion (LFI) paired with log-poisoning to achieve unauthenticated remote code execution as root. Affected are HiveOS IQ Engine and NetConfig interfaces through 10.0...

Jizhicms 代码问题漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is a set of open source content management system CMS of China's Extreme Networks Technology Company. Jizhicms v1.5 version of the existence of security vulnerabilities, attackers can take advantage of the vulnerability through the special .jpg fil...

Extreme CMS suffers from a code execution vulnerability (CNVD-2021-39004)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35735)

Extreme cms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35734)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme cms has SQL injection vulnerability

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35732)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35729)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34576)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS suffers from SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34285)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34300)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32382)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32381)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32383)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2020-16152

The Aerohive/Extreme Networks HiveOS administrative webinterface NetConfig is vulnerable to LFI because it uses an old version of PHP vulnerable to string truncation attacks. An attacker is able to use this in conjunction with log poisoning to gain root rights on a vulnerable access point. Recent...

Extreme Networks Management Center Cross-Site Scripting Vulnerability

Extreme Networks Management Center is an enterprise network management solution from Extreme Networks. The product supports features such as network monitoring and event alerting. A cross-site scripting vulnerability exists in Extreme Networks Management Center version 8.4.1.24. The vulnerability...

Extreme Networks Aerohive HiveOS 11.0 - Remote Denial of Service (PoC)

Exploit title : Extreme Networks Aerohive HiveOS 11.0 - Remote Denial of Service PoC Exploit Author : LiquidWorm Date : 2020-05-06 Vendor: Extreme Networks Product web page: https://www.extremenetworks.com Datasheet: https://www.aerohive.com/wp-content/uploads/AerohiveDatasheetHiveOS.pdf Affected...