CVE-2018-18877

In firmware version MS2.6.9900 of Columbia Weather MicroServer, an authenticated web user can access an alternative configuration page configmain.php that allows manipulation of the device...

CVE-2018-18877

CVE-2018-18877 affects the Columbia Weather MicroServer firmware MS_2.6.9900. An authenticated web user can access an alternate configuration page (config_main.php) and manipulate the device due to improper authentication. The vulnerability is documented with a high CVSS v3 base score (8.8; AV:N/...

CVE-2018-18877: Improper Authentication

In firmware version MS2.6.9900 of Columbia Weather MicroServer, an authenticated web user can access an alternative configuration page configmain.php that allows manipulation of the device...

CVE-2007-0167: Undefined Security Weakness

Multiple PHP file inclusion vulnerabilities in WGS-PPC aka PPC Search Engine, as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in 1 configadmin.php, 2 configmain.php, 3 configmember.php, and 4 mysqlconfig.php in config/; 5...