CVE-2017-13129

Mô tả

Tham khảo

• seclists.org/bugtraq/2017/Sep/19 · Mailing List
• seclists.org/fulldisclosure/2017/Sep/38 · Mailing List

Lỗ hổng khác của zktime web

• CVE-2017-17057TRUNG BÌNH 6.1There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied d…
• CVE-2017-17056CAO 8.8The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' f…
• CVE-2017-14680CAO 7.5ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.