147 matches found
The vulnerability of the microprogramming software in the Solar-Log photovoltaic system allows a remote attacker to gain unauthorized access to confidential information.
The vulnerability of the Microprogramming Software in the Solar-log photovoltaic system arises from the lack of password protection for CGI scripts used for data backup, restoration, and system configuration. Exploiting this vulnerability allows a malicious individual to gain unauthorized access ...
The vulnerability of the Solar-Log WEB monitoring system allows a malicious individual to execute arbitrary SQL commands.
Vulnerability allows remote attackers to execute arbitrary SQL commands using a specially crafted query...
PT-2015-01: SQL Injection in Solar-Log WEB
The specialists of the Positive Research center have detected an SQL injection vulnerability in Solar-Log WEB. SQL Injection vulnerability allows remote attackers to execute arbitrary SQL commands via a specially crafted request. How to fix Update your sofware up to the latest version Advisory...
PT-2014-07: Sensitive Information Disclosure in Solar-Log
The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Solar-Log. CGI scripts used for backup and restore system data and configuration are not protected with password even if local authentication is enabled and could be accessed by an...
PT-2014-08: Password Access in Solar-Log
The specialists of the Positive Research center have detected a Password Access vulnerability in Solar-Log. Application uses some kind of "encryption" for password stored in the configuration file with a static key. Attacker can get a password in plain text. How to fix Update your firmware up to...
PT-2014-06: Arbitrary File Upload in Solar-Log
The specialists of the Positive Research center have detected an Arbitrary File Upload vulnerability in Solar-Log. Default web server component allows an attacker to upload files to an arbitrary path, including system file path, without authentication or fixed solarlog:solarlog credential is used...
