PrismaWEB - Credentials Disclosure

PrismaWEB is susceptible to credential disclosure. The vulnerability exists due to the disclosure of hard-coded credentials allowing an attacker to effectively bypass authentication of PrismaWEB with administrator privileges. The credentials can be disclosed by simply navigating to the loginpar.j...

Prisma Industriale Checkweigher PrismaWEB Hardcoded Credentials Vulnerability

Prisma Industriale Checkweigher PrismaWEB is a management system for checkweighers from Prisma Italia. A security vulnerability exists in Prisma Industriale Checkweigher PrismaWEB version 1.21. A remote attacker can exploit the vulnerability by reading the file user/scripts/loginpar.js to obtain ...