1705 matches found
PT-2018-11: Buffer Overflow in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in PHOENIX CONTACT FL SWITCH. Buffer overflows in Phoenix Contact managed FL SWITCH allow attackers to cause a denial of service, execute arbitrary code, or disable Web and Telnet services. How to fix...
PT-2018-13: Command Injection in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected a Command Injection vulnerability in PHOENIX CONTACT FL SWITCH. Vulnerability in Phoenix Contact managed FL SWITCH allows attackers to inject and execute arbitrary OS commands. How to fix Update firmware to the latest version Advisory...
PT-2018-12: Information Disclosure in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in PHOENIX CONTACT FL SWITCH. Vulnerability in Phoenix Contact managed FL SWITCH allows unauthenticated attackers to read the configuration file. How to fix Update firmware to the latest version...
phoenix.enquira.com XSS vulnerability
Open Bug Bounty ID: OBB-561285 Description| Value ---|--- Affected Website:| phoenix.enquira.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of Phoenix Contact FL SWITCH router microprogramming software, related to deficiencies in authentication procedures, allows a intruder to access diagnostic information.
The vulnerability of Phoenix Contact FL SWITCH router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to remotely access diagnostic information by using the device’s monitoring mode...
PHOENIX CONTACT mGuard Unauthorized Modification Vulnerability
Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. An unauthorized modification vulnerability exists in the PHOENIX CONTACT mGuard. The mGuard device relies on an internal verification of the integrity of the update...
Input validation
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...
CVE-2018-5441
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...
CVE-2018-5441
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...
CVE-2018-5441
The CVE-2018-5441 issue affects PHOENIX CONTACT mGuard devices running firmware 7.2–8.6.0. Root cause: improper validation of the internal integrity check value during verification of update packages, enabling modification of firmware updates. Impact: attacker could modify firmware packages, with...
PHOENIX CONTACT mGuard
CVSS v3 7.8 ATTENTION: Low skill level to exploit. Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Improper Validation of Integrity Check Value AFFECTED PRODUCTS The following versions of mGuard, a network device, are affected: mGuard firmware versions 7.2 to 8.6.0 IMPACT Successful...
XML External Entity (XXE) Injection
Apache Phoenix is vulnerable to XML external entities XXE Injection attacks. The application does not disable DTD parsing by default, allowing a malicious user to inject external XML entities...
Icy Phoenix SQL Injection Vulnerability
Icy Phoenix is a content management system CMS based on phpBB forum software. The system contains modules such as gallery, knowledge base and instant messaging. A SQL injection vulnerability exists in Icy Phoenix version 2.2.0.105. A remote attacker can exploit this vulnerability by sending an...
PHOENIX CONTACT FL SWITCH Unauthorized Access Vulnerability
FL SWITCH is a managed Ethernet switch from the Phoenix Contact group. An unauthorized access vulnerability exists in the PHOENIX CONTACT FL SWITCH, which allows a remote, unauthenticated attacker to gain administrative privileges on the device by constructing a special HTTP request that bypasses...
PHOENIX CONTACT FL SWITCH Information Disclosure Vulnerability
FL SWITCH is a managed Ethernet switch from the Phoenix Contact group. An information disclosure vulnerability exists in the PHOENIX CONTACT FL SWITCH, which could allow a remote, unauthenticated attacker to read diagnostic information by using "monitor mode" on the device...
Sql injection
Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to adminkbart.php or the order parameter to adminjradmin.php, related to functionskb.php...
CVE-2018-5697
Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to adminkbart.php or the order parameter to adminjradmin.php, related to functionskb.php...
CVE-2018-5697
Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to adminkbart.php or the order parameter to adminjradmin.php, related to functionskb.php...
CVE-2018-5697
CVE-2018-5697 concerns Icy Phoenix 2.2.0.105, where an SQL injection is possible via an unapprove request to admin_kb_art.php or the order parameter to admin_jr_admin.php, related to functions_kb.php. The vulnerability allows arbitrary SQL execution, as described by multiple sources (CNVD/NVD map...
