CVE-2018-16137

CVE-2018-16137 affects IPBRICK OS 6.3 Web Management Console. Connected sources describe multiple SQL injections in the Web Management Console, arising from a database-based application that lacks validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL comm...

CVE-2018-16136

CVE-2018-16136 describes a CSRF flaw in the administrator interface of IPBRICK OS 6.3 where anti‑CSRF tokens are not validated. This allows a victim to unknowingly submit multiple forms, potentially abusing admin actions. The issue is documented with CVSS 3.0 base score 8.8 (high) and CVSS 2.0 ba...

CVE-2018-16138

The CVE-2018-16138 entry concerns IPBRICK OS 6.3, specifically the administration page, which has multiple XSS vulnerabilities. Connected sources identify the root cause as a lack of proper validation of client data by the WEB application, enabling client-side code execution scenarios. Documented...