Vendor
MicroWorld
6 known vulnerabilities.
1 result · Clear filters · Feed
-
Critical 9.4CVE-2014-125118 Public exploit
eScan 5.5-2 Web Management Console Command Injection
A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username t…