Johnson Controls Sensormatic Electronics American Dynamics victor Web Client

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely Vendor: Sensormatic Electronics, LLC; a subsidiary of Johnson Controls Equipment: American Dynamics victor Web Client, Software House C•CURE Web Client Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-66833)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-66854)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-67323)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Victor CMS suffers from file upload vulnerability (CNVD-2020-66852)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67388)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from file upload vulnerability (CNVD-2020-67324)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-67387)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67325)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS has a stored XSS vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a stored XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Victor CMS suffers from SQL injection vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-67100)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Victor CMS SQL Injection Vulnerability (CNVD-2020-59730)

Victor CMS is a simple content management system. A SQL injection vulnerability exists in the catid parameter in category.php in Victor CMS 1.0. An attacker can exploit this vulnerability to obtain data information in the database...

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...

Sql injection

A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...

CVE-2020-23945

Victor CMS V1.0 contains a SQL injection flaw in the cat_id parameter of category.php. The cat_id input is used in SQL queries, enabling an attacker to retrieve data from the database. Root cause: unsafe handling/concatenation of user input in category.php. Affected component: Victor CMS 1.0, cat...

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...

CVE-2020-9048

A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack...