CVE-2023-3983: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection to perform blind SQL injection...

CVE-2023-3983

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection to perform blind SQL injection...

CVE-2023-3983

Advantech iView vulnerable to an authenticated SQL injection via bypass of com.imc.iview.utils.CUtils.checkSQLInjection() in versions prior to v5.7.4 build 6752. The issue enables blind SQL injection by an authenticated attacker with low privileges and no user interaction, potentially compromisin...

PT-2023-4022

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.4 build 6752 Description An authenticated SQL injection issue exists, allowing a remote attacker to bypass checks in the checkSQLInjection function to perform blind SQL injection. This can enable the...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

Cross site scripting

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

CVE-2023-33335: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

CVE-2023-33335

CVE-2023-33335 affects Sophos iView via XSS in the grpname parameter. The vulnerability is described as enabling arbitrary script execution. CVSS v3.1 base score 6.1 (Medium) with network attack vector, user interaction required, and changed scope. iView is noted as EOL (Dec 31, 2020). The provid...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

Sophos iView 跨站脚本漏洞

Sophos iView is a solution from Sophos UK. A security vulnerability exists in Sophos iView that stems from the presence of cross-site scripting XSS, which allows the execution of arbitrary scripts...

PT-2023-24303 · Sophos · Sophos Iview

Name of the Vulnerable Software and Affected Versions: Sophos Sophos iView affected versions not specified Description: The issue is related to Cross Site Scripting XSS that allows arbitrary script to be executed. This is specifically due to a problem in the grpname parameter. There is no...

Advantech iView SQL Injection Information Disclosure

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Advantech iView SQL Injection Information Disclosure

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Advantech iView SQL Injection

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

Advantech iView Authentication Bypass Code Execution

The vulnerability of the centralized control system for network devices and ports of Advantech iView lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger service failures remotely...

Advantech iView Set Task Editor Item Unauthorized Access

The vulnerability of the setTaskEditorItem component in the Centralized Network Devices and Ports Management System of Advantech iView relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Advantech iView setConfiguration Unauthorized Access

The vulnerability of the setConfiguration component in the Advantech iView network device and port management system is related to the lack of measures taken to protect the SQL query structure during the processing of the ConfigurationServlet. Exploiting this vulnerability allows an attacker,...

Advantech iView Network Device getUserPrefMenuFragment Unauthenticated Code Execution

The vulnerability of the getUserPrefMenuFragment component of the Advantech iView network device and port management system is related to an incorrect path name limitation for the restricted access directory during the processing of the MenuServlet. Exploiting this vulnerability could allow a...