The vulnerability of the Conarc iChannel system for managing customer relationships, due to lack of access control, allows a hacker to obtain confidential information, modify configurations, or cause service interruptions.

The vulnerability of the Conarc iChannel system for managing customer relationships is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to obtain confidential information, modify configurations, or cause service failures by using the request...

Design/Logic Flaw

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaintEditConfig request which reaches an older version of a West Wind Web Connection HTTP service...

CVE-2017-17759

The CVE-2017-17759 issue affects Conarc iChannel, where the wc.dll?wwMaint~EditConfig endpoint exposes an unauthenticated access vector to an outdated West Wind Web Connection HTTP service. Remote attackers can obtain sensitive information, alter the server configuration, or trigger a denial of s...

CVE-2017-17759: Undefined Security Weakness

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaintEditConfig request which reaches an older version of a West Wind Web Connection HTTP service...

CVE-2007-2899

The CVE-2007-2899 entry affects NavBoard 2.6.0, with the vulnerability in admin_config.php allowing direct static code injection to data/config.php via multiple parameters (demonstrated via threadperpage in editconfig). Root cause: insecure handling of input leading to PHP code injection. Impact,...

CVE-2007-2899: Improper Control of Generation of Code

Direct static code injection vulnerability in adminconfig.php in NavBoard 2.6.0 allows remote attackers to inject arbitrary PHP code into data/config.php via multiple parameters, as demonstrated via the threadperpage parameter in an editconfig action...