CVE-2021-29012

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid temporarily during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus...

DMA Softlab Radius Manager Unauthorized Access Vulnerability

DMA Softlab Radius Manager is an application from DMA Softlab Inc. An easy-to-use management system for Mikrotik, Cisco, StarOS, Chillispot, DD-WRT, pfSense NAS devices and DOCSIS CMTS. An unauthorized access vulnerability exists in DMA Softlab Radius Manager version 4.4.0 that stems from a cooki...

CVE-2021-30147

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...

CVE-2021-30147

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...

CVE-2021-30147: Cross-Site Request Forgery (CSRF)

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...

PT-2021-18632

Name of the Vulnerable Software and Affected Versions DMA Softlab Radius Manager version 4.4.0 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to impacts such as adding new manager accounts via the admin.php endpoint. The estimated number of potentially...

DMA Softlab DMA Radius Manager 跨站请求伪造漏洞

DMA Softlab DMA Radius Manager is an application from DMA Softlab Inc. Easy-to-use management system for Mikrotik, Cisco, StarOS, Chillispot, DD-WRT, pfSense NAS devices and DOCSIS CMTS. A cross-site request forgery vulnerability exists in DMA Softlab Radius Manager 4.4.0 that allows adding a new...

CVE-2021-29012

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid temporarily during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus...

PT-2021-18024

Name of the Vulnerable Software and Affected Versions: DMA Softlab Radius Manager version 4.4.0 Description: The issue is related to Cross Site Scripting XSS that can be triggered via the description, name, or address field under the admin.php endpoint. This allows for potential malicious script...

CVE-2021-29012: Improper Authentication

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid temporarily during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus...

CVE-2021-29011: Improper Neutralization of Input During Web Page Generation

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting XSS via the description, name, or address field under admin.php...

PT-2021-18025

Name of the Vulnerable Software and Affected Versions: DMA Softlab Radius Manager version 4.4.0 Description: The issue allows for permanent access if the session cookie is stolen, as it is functionally equivalent to a static password. This occurs because the same session cookie is assigned to eve...