CVE-2019-10852

Mô tả

Tham khảo

• packetstormsecurity.com/files/155251/Computrols-CBAS-Web-19.0.0-Blind-SQL-Injection.html
• applied-risk.com/index.php/download_file/view/196/165 · Third Party Advisory
• applied-risk.com/labs/advisories · Third Party Advisory

Lỗ hổng khác của computrols building automation software

• CVE-2019-10848TRUNG BÌNH 5.3Computrols CBAS 18.0.0 allows Username Enumeration.
• CVE-2019-10847CAO 8.8Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
• CVE-2019-10850NGHIÊM TRỌNG 9.8Computrols CBAS 18.0.0 has Default Credentials.
• CVE-2019-10849CAO 7.5Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
• CVE-2019-10855CAO 7.5Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate t…