Lucene search
K

9 matches found

EUVD
EUVD
added 2025/12/31 9:30 p.m.4 views

EUVD-2025-206079

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMXADMINNM' and 'CMXCOMPLEXNM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's...

6.1CVSS6.2AI score0.00238EPSS
Exploits1References8
Cvelist
Cvelist
added 2025/12/31 6:40 p.m.24 views

CVE-2021-47743 COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMXADMINNM' and 'CMXCOMPLEXNM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's...

6.1CVSS0.00238EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/31 6:40 p.m.2 views

CVE-2021-47743 COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMXADMINNM' and 'CMXCOMPLEXNM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's...

6.1CVSS6.3AI score0.00238EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

COMMAX Biometric Access Control System 跨站脚本漏洞

COMMAX Biometric Access Control System is a biometric access control system from the Korean company COMMAX. A cross-site scripting vulnerability exists in the COMMAX Biometric Access Control System version 1.0.0, which stems from unauthenticated reflective cross-site scripting in the cookie...

6.1CVSS5.8AI score0.00238EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/09 8:37 p.m.20 views

CVE-2021-47706 COMMAX Biometric Access Control System Authentication Bypass

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

8.7CVSS0.00434EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

COMMAX Biometric Access Control System 安全漏洞

COMMAX Biometric Access Control System is a biometric access control system from COMMAX Corporation in South Korea. A security vulnerability exists in COMMAX Biometric Access Control System version 1.0.0, which stems from a cookie poisoning issue that could lead to authentication bypass and...

8.7CVSS6.6AI score0.00434EPSS
Exploits0References5
Packet Storm
Packet Storm
added 2021/08/16 12:0 a.m.350 views

COMMAX Biometric Access Control System 1.0.0 Authentication Bypass

COMMAX Biometric Access Control System 1.0.0 Authentication Bypass Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: 1.0.0 Summary: Biometric access control system. Desc: The application suffers from an authentication bypass vulnerability. An unauthenticated...

1.4AI score
Exploits0
Packet Storm
Packet Storm
added 2021/08/16 12:0 a.m.293 views

COMMAX Biometric Access Control System 1.0.0 Cross Site Scripting

COMMAX Biometric Access Control System 1.0.0 Cookie Reflected XSS Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: 1.0.0 Summary: Biometric access control system. Desc: The application is vulnerable to an unauthenticated reflected cross-site scripting XSS...

0.5AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2021/08/15 12:0 a.m.403 views

COMMAX Biometric Access Control System 1.0.0 Cookie Reflected XSS

Summary Biometric access control system. Description The application is vulnerable to an unauthenticated reflected cross-site scripting XSS vulnerability. Input passed to the Cookies 'CMXADMINNM' and 'CMXCOMPLEXNM' is not properly sanitised before being returned to the user. This can be exploited...

6.1CVSS6AI score0.00238EPSS
Exploits1
Rows per page
Query Builder