CVE-2018-16137

CVE-2018-16137 affects IPBRICK OS 6.3 Web Management Console. Connected sources describe multiple SQL injections in the Web Management Console, arising from a database-based application that lacks validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL comm...

CVE-2018-16137

An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...

IPBRICK OS SQL Injection Vulnerability

IPBRICK OS is a Linux-based communication platform. The platform includes features such as document and process management, e-mail and collaboration tools. A SQL injection vulnerability exists in the Web Management Console in IPBRICK OS version 6.3. The vulnerability stems from a database-based...

Four Faith Industrial Grade Router Remote Command Execution Vulnerability

Xiamen Four Faith Communication Technology Co., Ltd Four Faith is an IoT wireless communication products and solutions provider. A remote command execution vulnerability exists in Four Faith's industrial-grade routers, which can be exploited by an attacker logging into the web management interfac...

PT-2019-6112 · Netis · Netis Wf2419

Name of the Vulnerable Software and Affected Versions: Netis WF2419 versions V1.2.31805 through V2.2.36123 Description: The vulnerability is related to the implementation of the ping and tracert commands in the web interface of the Netis WF2419 router's firmware, which fails to neutralize special...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the...

CVE-2019-10710

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda,...

Design/Logic Flaw

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda,...

CVE-2019-10710

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda,...

CVE-2019-10710

CVE-2019-10710 describes insecure permissions in the Web management portal of IP cameras running Hisilicon Hi3510 firmware, allowing authenticated attackers to retrieve cleartext WiFi credentials via a specific HTTP request. Affected device families include HI3510/HI3518 and brands such as LOOSAF...

File upload vulnerability in QCMS web management system do***.php

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in QCMS website management system do.php, which can be exploited by attackers to gain control of the web server...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco. The product mainly for other Cisco solutions to provide e-mail, chat and Web callback capabilities. A cross-site scripting vulnerability exists in the web-based management interface of Cisco CEC, whi...

Input validation

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The...

SQL Injection Vulnerability in SemCms Foreign Trade Website Management System (PHP Version) SE***.php Page

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system PHP version SE.php page there is a SQL injection...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability (CNVD-2019-02751)

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides a comprehensive display of report-related business data and call center data and other functions. A cross-site request forgery vulnerability exists in the...

CVE-2019-1652

CVE-2019-1652 affects Cisco Small Business RV320/RV325 routers. The vulnerability is a command injection in the web-based management interface exploited via authenticated HTTP POST requests, allowing an admin-level attacker to execute commands as root on the underlying Linux shell. Public details...

PT-2019-1227

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers affected versions not specified Description A vulnerability in the web-based management interface of the routers could allow an unauthenticated, remote attacker to retrieve...

Siemens SICAM A8000 Series Denial Of Service Exploit

Exploit for windows platform in category web applications Product: SICAM A8000 Series Vendor: Siemens CSNC ID: CSNC-2019-002 CVE ID: CVE-2018-13798 Subject: SICAM Webinterface XXE DoS Risk: Medium CVSS 3.0 Base Score: 5.3 CVSS 3.0: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Effect...