CVE-2020-11556

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

CVE-2020-11554

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4...

CVE-2020-11554

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4...

CVE-2020-11555

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files...

CVE-2020-11557

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value...

CVE-2020-11555

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files...

CVE-2020-11553

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

CVE-2020-11553

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

Cross site scripting

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

Code injection

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files...

Cross site request forgery (csrf)

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

CVE-2020-11553

Castle Rock SNMPc Online 12.10.10 (before 2020-01-28) is affected by a cross-site request forgery (CSRF) flaw in its web application. The vulnerability stems from insufficient validation that requests originate from a trusted user, allowing an attacker to trick an authenticated user into sending ...

CVE-2020-11553

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

CVE-2020-11554

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4...

CVE-2020-11554

CVE-2020-11554 affects Castle Rock SNMPc Online 12.10.10 prior to 2020-01-28. The issue is an information disclosure where remote attackers can obtain sensitive information via the file info.php4. The connected sources consistently describe an unauthenticated remote disclosure vector leading to e...

CVE-2020-11555

CVE-2020-11555 affects Castle Rock SNMPc Online 12.10.10 (pre-2020-01-28). The connected sources confirm a vulnerability that allows remote attackers to obtain sensitive credential information from backup files. The issue is documented across multiple feeds (Red Hat, CNVD, CVE lists) with consist...

CVE-2020-11556

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

CVE-2020-11556

Castle Rock SNMPc Online 12.10.10 (before 2020-01-28) contains multiple persistent and reflected XSS vulnerabilities in the WEB application due to lack of proper validation of client data. The issues are documented across CVE/NVD and CNVD-style records; impact is client-side code execution via XS...

CVE-2020-11557

Castle Rock SNMPc Online 12.10.10 (before 2020-01-28) is affected by a vulnerability where username and password values are included in cleartext within each request’s cookie value. This cookie exposure could reveal credentials to an attacker who can observe traffic or gain access to cookies. Con...

CVE-2020-11557

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value...