114 matches found
CBAS-Web 19.0.0 - Username Enumeration
Exploit Title: CBAS-Web 19.0.0 - Username Enumeration Google Dork: NA Date: 2019-11-11 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/ Version: 19.0.0 Tested on: NA CVE :...
CBAS-Web 19.0.0 - Remote Code Execution
Exploit Title: CBAS-Web 19.0.0 - Remote Code Execution Google Dork: NA Date: 2019-11-11 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/ Version: 19.0.0 Tested on: NA CVE : N/A...
CVE-2019-10848
Computrols CBAS 18.0.0 allows Username Enumeration...
CVE-2019-10847
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery...
CVE-2019-10847
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery...
CVE-2019-10848
Computrols CBAS 18.0.0 allows Username Enumeration...
Cross site request forgery (csrf)
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery...
Design/Logic Flaw
Computrols CBAS 18.0.0 allows Username Enumeration...
CVE-2019-10847
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery...
CVE-2019-10847
CVE-2019-10847 affects Computrols CBAS Web (CSRF). Documents show a CSRF vulnerability in CBAS Web, notably in version 18.0.0 (and affected earlier versions) that can allow unauthorized actions such as adding a Super Admin via forged requests. Public advisories indicate remote exploitation is pos...
CVE-2019-10848
Computrols CBAS 18.0.0 allows Username Enumeration...
CVE-2019-10848
CVE-2019-10848 affects Computrols CBAS Web (CBAS Web) versions around 18.x/19.x, where the Information Exposure Through Discrepancy (username enumeration) vulnerability exists in CBAS Web prior to certain fixes. Public sources (NVD, Red Hat advisories, Exploit-DB/PacketStorm) document that CBAS W...
Computrols CBAS Web Cross-Site Request Forgery Vulnerability
Computrols CBAS is a building automation system from Computrols USA. A cross-site request forgery vulnerability exists in Computrols CBAS, which can be exploited by an attacker to send unintended requests to a server via an affected client...
Computrols CBAS Web Cross-Site Request Forgery Vulnerability (CNVD-2019-15903)
Computrols CBAS is a building automation system from Computrols USA. A cross-site request forgery vulnerability in Computrols CBAS version 18.0.0 can be exploited by an attacker to send an unintended request to a server via an affected client...
CVE-2019-10848: Observable Discrepancy
Computrols CBAS 18.0.0 allows Username Enumeration...
PT-2019-12051
Name of the Vulnerable Software and Affected Versions Computrols CBAS version 18.0.0 Description The issue allows Cross-Site Request Forgery. Recommendations For version 18.0.0, update to a newer version that contains a fix for this issue...
CVE-2019-10847: Cross-Site Request Forgery (CSRF)
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery...
PT-2019-12052
Name of the Vulnerable Software and Affected Versions Computrols CBAS version 18.0.0 Description The issue allows for username enumeration. Recommendations For Computrols CBAS version 18.0.0, consider implementing additional security measures to prevent username enumeration, such as limiting the...