68 matches found
PT-2012-2425
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary SQL commands via a malformed URL, potentially leading to unauthorized data access or modification. Recommendations For versio...
PT-2012-1902
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary code via a long string value in unspecified parameters. Recommendations For versions prior to 7.0, update to version 7.0 or...
PT-2012-2428
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to either enable or disable date and time syncing by using a crafted URL. Recommendations For versions prior to 7.0, update to version 7.0 or late...
CVE-2012-0238: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors...
PT-2012-3152
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess version 7.0 Description A cross-site request forgery CSRF issue exists, allowing remote authenticated users to hijack the authentication of unspecified victims. This issue is a result of an incomplete fix for a...
CVE-2011-4041: Improper Control of Generation of Code
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592...
PT-2012-1791
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess version affected versions not specified Description The issue allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592, specifically...
