CVE-2015-2870

Cross-site scripting XSS vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element...

CVE-2015-2870

Cross-site scripting XSS vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element...

PT-2015-6987

Name of the Vulnerable Software and Affected Versions Chiyu BF-630 and BF-630W versions affected versions not specified Description The issue allows remote attackers to bypass authentication. Attackers can read or modify certain configuration settings, including Voice Time Set settings via a...

CVE-2015-2870: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element...

CVE-2015-5618: Undefined Security Weakness

Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and 1 read or 2 modify a Voice Time Set configuration settings via a request to voice.htm or b UniFinger configuration settings via a request to bf.htm, a different vulnerability than...

PT-2015-5951

Name of the Vulnerable Software and Affected Versions Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element. This could...