91 matches found
CVE-2016-9333
CVE-2016-9333 affects Moxa SoftCMS prior to version 1.6. The SoftCMS Webserver fails to properly sanitize input, enabling SQL Injection that could allow a remote attacker to gain administrator privileges. The vulnerability has been assigned CVSS v3 base score 9.8 (CRITICAL) with network access, n...
CVE-2016-8360
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...
CVE-2016-9332: Undefined Security Weakness
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition...
CVE-2016-8360: Double Free
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...
CVE-2016-9333: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input SQL INJECTION...
PT-2017-10065
Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6 Description An issue in Moxa SoftCMS Webserver allows an attacker to provide unexpected input values, potentially causing the program to crash or leading to excessive consumption of resources, which could...
PT-2017-10066
Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6 Description The issue allows a remote attacker to gain access with administrator privileges through specially crafted input, leveraging a SQL injection technique. This occurs because the SoftCMS Application...
PT-2016-7498
Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6 Description A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server, allowing an attacker to modify memory locations and possibly cause a denial of...
Moxa SoftCMS AspWebServer URL Processing Double Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of requests to the web server. A crafted URL can cause a pointer to be reused...
Moxa SoftCMS Input Validation Vulnerability
Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. An input validation vulnerability exists in versions of Moxa SoftCMS prior to 1.6. An attacker...
Moxa SoftCMS Denial of Service Vulnerability
Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. A denial of service vulnerability exists in Moxa SoftCMS versions prior to 1.6. Due to a double...
Moxa SoftCMS SQL Injection Vulnerability
Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. A SQL injection vulnerability exists in Moxa SoftCMS versions prior to 1.6. An attacker can...
Moxa SoftCMS 1.5 - Denial of Service (PoC) Exploit
Exploit for windows platform in category dos / poc ''' Title: Moxa SoftCMS 1.5 AspWebServer Denial of Service Vulnerability Author: Zhou Yu Email: email protected Vendor: http://www.moxa.com/ Versions affected: 1.5 or prior versions Test on: Moxa SoftCMS 1.5 on Windows 7 SP1 x32 CVE: CVE-2016-933...
Moxa SoftCMS 1.5 - Denial of Service (PoC)
Moxa SoftCMS 1.5 - Denial of Service PoC ''' Title: Moxa SoftCMS 1.5 AspWebServer Denial of Service Vulnerability Author: Zhou Yu Email: [email protected] Vendor: http://www.moxa.com/ Versions affected: 1.5 or prior versions Test on: Moxa SoftCMS 1.5 on Windows 7 SP1 x32 CVE: CVE-2016-9332 Advisor...
Moxa SoftCMS 1.5 - Denial of Service (PoC)
''' Title: Moxa SoftCMS 1.5 AspWebServer Denial of Service Vulnerability Author: Zhou Yu Email: [email protected] Vendor: http://www.moxa.com/ Versions affected: 1.5 or prior versions Test on: Moxa SoftCMS 1.5 on Windows 7 SP1 x32 CVE: CVE-2016-9332 Advisory:...
Moxa SoftCMS CGI Program SQL Injection (CVE-2016-5792)
A SQL injection vulnerability has been reported in Moxa SoftCMS. The vulnerability is due to insufficient input validation on user supplied input. A remote attacker can exploit this vulnerability by providing a crafted input to the product. Successful exploitation would allow the attacker to...
Login Authentication Bypass Vulnerability in SoftCMS System
SoftCMS is a large-scale video surveillance management system from Moxa Moxa Technology. A security bypass vulnerability exists in SoftCMS version 1.5 in the password input field of the user login page, which can be exploited by attackers to bypass user authentication and login the system...
Moxa SoftCMS Vulnerabilities
OVERVIEW Zhou Yu working with Trend Micro’s Zero Day Initiative and Gu Ziqiang from Huawei Weiran Labs have identified vulnerabilities in Moxa’s SoftCMS Webserver Application. Moxa has produced an update to mitigate these vulnerabilities. Both researchers have tested the update to validate that i...
Moxa SoftCMS getcaminfo SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getcaminfo.asp script. When parsing the VWID element, the process fails to properly...
