CVE-2020-8995

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools...

CVE-2020-8995

The CVE-2020-8995 entry concerns Programi Bilanc Build 007 Release 014 (dated 31.01.2020): a .exe contains hardcoded credentials to multiple servers, enabling remote attackers to access the website, update server, and external issue tracking tools. The root cause is embedded credentials in the ex...

Bilanc Shpk Programi Bilanc build Security Vulnerabilities

Bilanc Shpk Programi Bilanc is a software for generating balance sheets from Bilanc Shpk, Alphania. A security vulnerability exists in Programi Bilanc build 007 distribution 014 31.01.2020 and below, whose software update packages are downloaded via explicit HTTP...

Bilanc Shpk Programi Bilanc SQL Injection Vulnerability

Bilanc Shpk Programi Bilanc is a software for generating balance sheets from Bilanc Shpk, Alphania. A security vulnerability exists in Bilanc Shpk Programi Bilanc 014 version 31.01.2020. It has multiple SQL injection vulnerabilities...

Bilanc Shpk Programi Bilanc build Trust Management Issues Vulnerabilities

Bilanc Shpk Programi Bilanc is a software for generating balance sheets from Bilanc Shpk, Alphania. A vulnerability with trust management issues exists in Programi Bilanc build 014 31.01.2020 007 distribution and below. During installation, it defaults to using the account administrator and...