6 matches found
CVE-2016-5810
upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...
CVE-2016-5810
upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...
CVE-2016-5810
Advantech WebAccess vulnerable upAdminPg.asp (before 8.1_20160519) exposes password information to remote authenticated administrators via unspecified vectors. The CVE-2016-5810 issue is classified as an information-disclosure vulnerability in the upAdminPg.asp component, enabling an admin higher...
CVE-2014-2366
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code...
CVE-2014-2366
CVE-2014-2366 affects Advantech WebAccess prior to 7.2, where upAdminPg.asp can disclose credentials to remote authenticated users by exposing them in the HTML source. Evidence from NVD/NIST and multiple advisories confirms the vulnerable component and the credential disclosure flaw, with a high ...
Advantech WebAccess Password Disclosure Vulnerability
This vulnerability allows remote attackers to disclose arbitrary credentials on vulnerable versions of Advantech WebAccess. Authentication is required to exploit this vulnerability. The specific flaw exists within the upAdminPg.asp component. An authenticated user can provide an arbitrary existin...