EUVD-2018-7993

Malware in sbrugna...

EUVD-2018-7991

Malware in sbrugna...

EUVD-2018-7992

Malware in sbrugna...

CVE-2018-16136

An issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't check for Anti-CSRF tokens, allowing the submission of multiple forms unwillingly by a victim...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...

CVE-2018-16137

An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...

CVE-2018-16136

An issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't check for Anti-CSRF tokens, allowing the submission of multiple forms unwillingly by a victim...

CVE-2018-16137

An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...

Cross site request forgery (csrf)

An issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't check for Anti-CSRF tokens, allowing the submission of multiple forms unwillingly by a victim...

Sql injection

An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...

CVE-2018-16138

The CVE-2018-16138 entry concerns IPBRICK OS 6.3, specifically the administration page, which has multiple XSS vulnerabilities. Connected sources identify the root cause as a lack of proper validation of client data by the WEB application, enabling client-side code execution scenarios. Documented...

CVE-2018-16137

An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...

CVE-2018-16137

CVE-2018-16137 affects IPBRICK OS 6.3 Web Management Console. Connected sources describe multiple SQL injections in the Web Management Console, arising from a database-based application that lacks validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL comm...

CVE-2018-16136

CVE-2018-16136 describes a CSRF flaw in the administrator interface of IPBRICK OS 6.3 where anti‑CSRF tokens are not validated. This allows a victim to unknowingly submit multiple forms, potentially abusing admin actions. The issue is documented with CVSS 3.0 base score 8.8 (high) and CVSS 2.0 ba...

IPBRICK OS SQL Injection Vulnerability

IPBRICK OS is a Linux-based communication platform. The platform includes features such as document and process management, e-mail and collaboration tools. A SQL injection vulnerability exists in the Web Management Console in IPBRICK OS version 6.3. The vulnerability stems from a database-based...

PT-2019-9226

Name of the Vulnerable Software and Affected Versions IPBRICK OS version 6.3 Description An issue was discovered in the administration page, where multiple XSS vulnerabilities exist. Recommendations For IPBRICK OS version 6.3, at the moment, there is no information about a newer version that...

PT-2019-9224

Name of the Vulnerable Software and Affected Versions IPBRICK OS version 6.3 Description An issue in the administrator interface allows the submission of multiple forms unwillingly by a victim due to the lack of Anti-CSRF token checks. Recommendations For IPBRICK OS version 6.3, consider...

PT-2019-9225

Name of the Vulnerable Software and Affected Versions IPBRICK OS version 6.3 Description An issue was discovered in the Web Management Console, where multiple SQL injections are possible. Recommendations For IPBRICK OS version 6.3, update to a version that includes a fix for this issue, if...