3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
4.3CVSS6.1AI score0.01119EPSS
SaveExploits0References1Affected Software1
Default credentials
Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack...
5CVSS7AI score0.01116EPSS
SaveExploits0References1Affected Software1
CVE-2015-0976
CVE-2015-0976 is an XSS vulnerability in Inductive Automation Ignition 7.7.2. The issue stems from improper neutralization of input in web page generation, with the server reflecting HTTP request data back in the HTTP response, enabling remote attackers to inject arbitrary script. Several connect...
4.3CVSS5.7AI score0.01119EPSS
SaveExploits0References1Affected Software1
20