Skip to content
OpenAdvisories

Vendor

iWT

6 known vulnerabilities.

Products

FaceSentry Access Control System 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-25277

    FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php

    FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of pluginInstall.php that allows attackers to inject malicious scripts. Attackers can exploit the unvalidated input to execute arbitrary JavaScript in …

    iWT FaceSentry Access Control System
  • Medium 5.9
    CVE-2019-25278

    FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure

    FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information duri…

    iWT FaceSentry Access Control System
  • Medium 4.3
    CVE-2019-25242

    FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface

    FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change administrator passwords, add new admin u…

    iWT FaceSentry Access Control System