Directory traversal

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php...

CVE-2021-37292

CVE-2021-37292 affects KevinLAB Building Energy Management System 4ST BEMS 1.0.0. The NUCLEI template confirms an undocumented backdoor account with admin-level privileges enables login and full remote control, bypassing authentication. Impact is full system control and remote administration. Mit...

CVE-2021-37293

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php...