CVE-2020-11553

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

CVE-2020-11557

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value...

Cross site scripting

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

Cross site request forgery (csrf)

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

CVE-2020-11553

Castle Rock SNMPc Online 12.10.10 (before 2020-01-28) is affected by a cross-site request forgery (CSRF) flaw in its web application. The vulnerability stems from insufficient validation that requests originate from a trusted user, allowing an attacker to trick an authenticated user into sending ...

CVE-2020-11553

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

CVE-2020-11554

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4...

CVE-2020-11554

CVE-2020-11554 affects Castle Rock SNMPc Online 12.10.10 prior to 2020-01-28. The issue is an information disclosure where remote attackers can obtain sensitive information via the file info.php4. The connected sources consistently describe an unauthenticated remote disclosure vector leading to e...

CVE-2020-11555

CVE-2020-11555 affects Castle Rock SNMPc Online 12.10.10 (pre-2020-01-28). The connected sources confirm a vulnerability that allows remote attackers to obtain sensitive credential information from backup files. The issue is documented across multiple feeds (Red Hat, CNVD, CVE lists) with consist...

CVE-2020-11556

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

CVE-2020-11556

Castle Rock SNMPc Online 12.10.10 (before 2020-01-28) contains multiple persistent and reflected XSS vulnerabilities in the WEB application due to lack of proper validation of client data. The issues are documented across CVE/NVD and CNVD-style records; impact is client-side code execution via XS...

CVE-2020-11557

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value...

CVE-2020-11557

Castle Rock SNMPc Online 12.10.10 (before 2020-01-28) is affected by a vulnerability where username and password values are included in cleartext within each request’s cookie value. This cookie exposure could reveal credentials to an attacker who can observe traffic or gain access to cookies. Con...

PT-2020-12691

Name of the Vulnerable Software and Affected Versions Castle Rock SNMPc Online versions 12.10.10 and earlier Description An issue was discovered in Castle Rock SNMPc Online where it includes the username and password values in cleartext within each request's cookie value. Recommendations For Cast...

CVE-2020-11554: Undefined Security Weakness

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4...

CVE-2020-11557: Cleartext Transmission of Sensitive Information

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value...

PT-2020-12689

Name of the Vulnerable Software and Affected Versions Castle Rock SNMPc Online versions 12.10.10 and earlier Description An issue allows remote attackers to obtain sensitive credential information from backup files. Recommendations For Castle Rock SNMPc Online versions 12.10.10 and earlier, updat...

CVE-2020-11556: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

PT-2020-12688

Name of the Vulnerable Software and Affected Versions Castle Rock SNMPc Online versions 12.10.10 and earlier Description An issue allows remote attackers to obtain sensitive information via the "info.php4" endpoint. Recommendations For Castle Rock SNMPc Online versions 12.10.10 and earlier, updat...

CVE-2020-11555: Insufficiently Protected Credentials

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files...