webgui webgui vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

FreeNAS prior to 9.3-M3 has a blank admin password, which allows remote malicious users to gain root privileges by leveraging a WebGui login.

Freenas Freenas 9.3 Freenas Freenas

10

CVSSv2

Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."

Plain Black Webgui 7.4.34

9

CVSSv2

raspap-webgui in RaspAP 2.6.6 allows malicious users to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/h...

Raspap Raspap 2.6.6

9

CVSSv2

An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense prior to 2.4.4 due to its passing user input from the $_POST parameters "ifdescr" and "ipv" to a shell without escaping the contents of the ...

Netgate Pfsense

7.5

CVSSv2

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x prior to 11.2.0-HF3 and 11.2.x prior to 11...

7.5

CVSSv2

PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the mod_dir parameter.

Muskatli Sofi Webgui 0.4.2 Muskatli Sofi Webgui Muskatli Sofi Webgui 0.6.0pre Muskatli Sofi Webgui 0.5.2

1 EDB exploit

7.5

CVSSv2

Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions prior to 6.7.6 allows malicious users to execute arbitrary code via unknown attack vectors.

1 EDB exploit

7.5

CVSSv2

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI prior to 6.7.3 allow remote malicious users to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or (3) WebGUI.pm.

Plainblack Webgui

6.8

CVSSv2

The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuu43968.

Cisco Edge Bluebird Operating System 1.2

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook