126 matches found
CVE-2023-22583
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...
CVE-2023-22586
The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter...
CVE-2023-22584
The Danfoss AK-EM100 stores login credentials in cleartext...
CVE-2023-22585
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...
CVE-2023-22582
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...
CVE-2023-22585
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...
CVE-2023-22582
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...
CVE-2023-22583
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...
Cross site scripting
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...
Remote file inclusion
The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter...
Sql injection
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...
Command injection
The Danfoss AK-EM100 web applications allow for OS command injection through the web application parameters...
CVE-2023-22582 Reflected Cross-Site Scripting in Danfoss AK-EM100
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...
CVE-2023-25911 Authenticated OS Command Injection in Danfoss AK-EM100
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...
CVE-2023-22582 Reflected Cross-Site Scripting in Danfoss AK-EM100
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...
CVE-2023-22583
CVE-2023-22583 affects the Danfoss AK-EM100 web-forms login functionality. The issue is an SQL injection vulnerability in the login forms, enabling potential unauthorized data access or manipulation. The core details across connected documents confirm the affected software (Danfoss AK-EM100 web i...
CVE-2023-22583 SQL Injection in Danfoss AK-EM100
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...
CVE-2023-25911 Authenticated OS Command Injection in Danfoss AK-EM100
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...
CVE-2023-22582
CVE-2023-22582 concerns the Danfoss AK-EM100 web applications and describes a Reflected Cross-Site Scripting (XSS) vulnerability. The CVE entry indicates a network-accessible issue with low to high-severity interpretations across sources, with CVSSv3.1 metrics showing base scores of 6.1 (MEDIUM) ...