CVE-2020-25746: Exposure of Sensitive Information to an Unauthorized Actor

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

Resourcexpress Qubi3 Information Disclosure Vulnerability

Resourcexpress Qubi3 is a conference room booking device from Resourcexpress UK. A security vulnerability exists in QED ResourceXpress Qubi3 prior to version 1.40.9, which can be exploited by an attacker to obtain sensitive information through the debugging interface...

PT-2020-16182

Name of the Vulnerable Software and Affected Versions QED ResourceXpress Qubi3 versions prior to 1.40.9 Description The issue allows a local attacker with physical access to the device to obtain sensitive information via the debug interface. This is done by capturing keystrokes over a USB cable,...

CVE-2020-13877

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...

CVE-2020-13877

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...

Sql injection

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...

CVE-2020-13877

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...

CVE-2020-13877

CVE-2020-13877 affects ResourceXpress Meeting Monitor 4.9. It describes SQL injection on various ASPX pages that could lead to remote code execution and information disclosure. CVSS-3.1 base score is 9.8 (NETWORK, LOW attack complexity, PR:N, UI:N, S:U, C:H/I:H/A:H). CVSS-2.0 base score 7.5 (NETW...

CVE-2020-13877: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...

PT-2020-13745

Name of the Vulnerable Software and Affected Versions ResourceXpress Meeting Monitor version 4.9 Description The issue concerns SQL Injection problems in various ASPX pages, which could lead to remote code execution and information disclosure. Recommendations For ResourceXpress Meeting Monitor...