CVE-2021-22707

The CVE-2021-22707 entry describes a hard-coded credentials vulnerability in Schneider Electric EVlink devices (City, Parking, Smart Wallbox) with versions prior to R8 V3.4.0.1. The concrete details from connected sources (e.g., NUCLEI template) indicate an authentication bypass vulnerability tha...

CVE-2021-22707

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

CVE-2021-22706

The CVE-2021-22706 issue is a Cross-site Scripting (CWE-79) vulnerability affecting Schneider Electric EVlink City (EVC1S22P4 / EVC1S7P4), EVlink Parking (EVW2 / EVF2 / EV.2), and EVlink Smart Wallbox (EVB1A). The root cause is improper neutralization of input during web page generation in the ch...

CVE-2021-22706

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions...

EVlink City、EVlink Parking 安全漏洞

Schneider Electric EVlink City, among others, is a charging solution for electric vehicle charging stations from the French company Schneider Electric. The EVlink City, EVlink Parking, and EVlink Smart Wallbox information disclosure vulnerability can be exploited by an attacker to gain knowledge ...

EVlink City、EVlink Parking和EVlink Smart Wallbox 信息泄露漏洞

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, and EVlink Smart Wallbox have an information disclosure vulnerability that The vulnerability stems from the fact that when maliciou...

Vehicle Parking Management System 1.0 Cross Site Scripting

Exploit Title: Vehicle Parking Management System - Stored Cross-Site-Scripting XSS Date: 2021-07-09 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/vehicle-parking-management-system-using-php-and-mysql/...

多款Schneider Electric产品跨站脚本漏洞

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, and EVlink Smart Wallbox have a cross-site scripting vulnerability that vulnerability stems from the potential to cause code...

EVlink City、EVlink Parking 和 EVlink Smart Wallbox 跨站脚本漏洞

Schneider Electric EVlink City is a charging solution for electric vehicle charging stations from Schneider Electric, France. A cross-site scripting vulnerability exists in EVlink City, EVlink Parking, and EVlink Smart Wallbox, which can be exploited by an attacker to emulate the user who manages...

EVlink City、EVlink Parking、EVlink Smart Wallbox 信任管理问题漏洞

Schneider Electric EVlink City, among others, is a charging solution for electric vehicle charging stations from the French company Schneider Electric. A trust management issue vulnerability exists in EVlink City, EVlink Parking, and EVlink Smart Wallbox, which could be exploited by an attacker t...

EVlink City、EVlink Parking和EVlink Smart Wallbox 安全特征问题漏洞

Schneider Electric EVlink City is a charging solution for electric vehicle charging stations from Schneider Electric. EVlink City, EVlink Parking, and EVlink Smart Wallbox are vulnerable to a security feature issue. An attacker could use the vulnerability to gain unauthorized access to the chargi...

EVlink City、EVlink Parking 和 EVlink Smart Wallbox 代码问题漏洞

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, and EVlink Smart Wallbox are vulnerable to a code issue that The vulnerability stems from the fact that when carefully crafted...

EVlink City、EVlink Parking 和 EVlink Smart Wallbox 安全漏洞

Schneider Electric EVlink City, among others, is a charging solution for electric vehicle charging stations from the French company Schneider Electric. A security vulnerability exists in EVlink City, EVlink Parking, and EVlink Smart Wallbox, which can be exploited by an attacker to gain...

EVlink City、EVlink Parking 跨站脚本漏洞

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, EVlink Smart Wallbox cross-site scripting vulnerability, which stems from the fact that when malicious parameters are submitted to...

EVlink City、EVlink Parking、EVlink Smart Wallbox 安全漏洞

Schneider Electric EVlink City, among others, is a charging solution for electric vehicle charging stations from the French company Schneider Electric. EVlink City, EVlink Parking, and EVlink Smart Wallbox have a security vulnerability that can be exploited by an attacker to change a user's...

Vehicle Parking Management System 1.0 Cross Site Scripting Vulnerability

Vehicle Parking Management System version 1.0 suffers from a persistent cross site scripting vulnerability. Original discovery of persistent cross site scripting in this version is attributed to Tushar Vaidya in February of 2021. Exploit Title: Vehicle Parking Management System - Stored...

Sichuan YiPoShiJie Intelligent Technology Co., Ltd. building system there are logical flaws vulnerability

Ltd. is a company whose business covers the fields of ETC intelligent parking solutions, ETC non-stop payment, parking lot operation and management services. Ltd. building system has a logic flaw vulnerability, attackers can use the vulnerability to obtain sensitive information...

Recycle Your Phone, Sure, But Maybe Not Your Number

Many online services allow users to reset their passwords by clicking a link sent via SMS, and this unfortunately widespread practice has turned mobile phone numbers into de facto identity documents. Which means losing control over one thanks to a divorce, job termination or financial crisis can ...

Directory Traversal Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-33198)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A directory traversal vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit thi...

Information leakage vulnerability in KTO's fully intelligent parking video payment system

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. There is an information leakage vulnerability in Kerto's fully intelligent parking video charging system. Attackers can utilize t...