CVE-2023-33730

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format...

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

CVE-2023-33732

Cross Site Scripting XSS in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval...

CVE-2023-33731

Reflected Cross Site Scripting XSS in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the URL directly...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

CVE-2024-42919 affects MicroWorld eScan Management Console 14.0.1400.2281, with a vulnerability described as Incorrect Access Control via the acteScanAVReport function. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no user interaction, and total impact to confidentiality, integ...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2023-34836

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

CVE-2023-34837

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath...

CVE-2023-34835

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable deletefile parameter...

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath...

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

PT-2023-25023 · Microworld Technologies · Escan Management Console

Name of the Vulnerable Software and Affected Versions: Microworld Technologies eScan Management console version 14.0.1400.2281 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath. Recommendations: For version...

CVE-2023-34836

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

CVE-2023-34836

The CVE-2023-34836 entry concerns Microworld Technologies’ eScan Management Console, version 14.0.1400.2281. The vulnerability is a Cross Site Scripting (XSS) flaw that enables a remote attacker to execute arbitrary code by crafting scripts passed via the Dtltyp and ListName parameters. This is r...

CVE-2023-34838

CVE-2023-34838 affects Microworld Technologies eScan Management Console (v14.0.1400.2281). It is a Cross-Site Scripting vulnerability in the Description parameter that allows a remote attacker to execute arbitrary code via a crafted script. Root cause appears to be insufficient input sanitization...