PT-2015-5019

Name of the Vulnerable Software and Affected Versions IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description The issue arises from the mishandling of URL encoding, allowing remote attackers to write to or delete files by using a crafted string. Recommendations For versions pri...

CVE-2015-1002: Undefined Security Weakness

IniNet embeddedWebServer aka eWebServer before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string...

PT-2015-5021

Name of the Vulnerable Software and Affected Versions IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description The issue allows context-dependent attackers to obtain sensitive information due to the use of cleartext for password storage. Recommendations For versions prior to 2.0...

IniNet Solutions embeddedWebServer Cleartext Storage Vulnerability

OVERVIEW Aleksandr Timorin of Positive Technologies has identified a cleartext storage of sensitive information vulnerability in IniNet Solutions GmbH’s embeddedWebServer eWebServer. IniNet Solutions GmbH has produced a new version that mitigates this vulnerability. AFFECTED PRODUCTS The followin...