Skip to content
OpenAdvisories

Vendor

OPEN BMCS

5 known vulnerabilities.

Products

OpenBMCS 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2021-47703

    OpenBMCS Server Side Request Forgery (SSRF) via /php/query.php

    OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can …

    OPEN BMCS OpenBMCS
  • Medium 5.3
    CVE-2021-47702

    OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php

    OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or mo…

    OPEN BMCS OpenBMCS