CVE-2020-3934 TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

PT-2020-17810

Name of the Vulnerable Software and Affected Versions TAIWAN SECOM CO., LTD. Door Access Control and Personnel Attendance Management system affected versions not specified Description The system contains a pre-authentication SQL injection issue, allowing attackers to inject specific SQL commands...

PT-2020-17809

Name of the Vulnerable Software and Affected Versions TAIWAN SECOM CO., LTD. Door Access Control and Personnel Attendance Management system affected versions not specified Description The system allows attackers to enumerate and examine user accounts, potentially leading to unauthorized access or...

PT-2020-17811

Name of the Vulnerable Software and Affected Versions TAIWAN SECOM CO., LTD. Door Access Control and Personnel Attendance Management system affected versions not specified Description The system stores users' information in cleartext in the cookie, which allows attackers to obtain passwords...

CVE-2020-3933: Undefined Security Weakness

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system...

CVE-2020-3935: Cleartext Storage of Sensitive Information

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the cookie, which divulges password to attackers...

CVE-2020-3934: Improper Neutralization of Special Elements used in an SQL Command

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...