CVE-2015-6027

Castle Rock Computing SNMPc is vulnerable to Cross-Site Scripting via SNMP in versions prior to 2015-12-17. Affected component is SNMPc; root cause is a XSS vulnerability exploitable through SNMP. Public impact details are limited to what is stated in the sources (XSS; potential for modification ...

CVE-2015-6028

Castle Rock Computing SNMPc is affected by CVE-2015-6028 due to a SQL injection in the sc parameter prior to 2015-12-17. The CNVD record CNVD-2017-05437 confirms the vulnerability in Castle Rock SNMPc Network Manager, noting the ability for a remote attacker to extract data from the database via ...