cbcvebase.

Microworld Escan Web Management Console vulnerabilities

1 known vulnerability affecting microworld/escan_web_management_console.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2014-125118P2CRITICALCVSS 9.4PoCv5.5-22025-07-25
CVE-2014-125118 [CRITICAL] CWE-78 CVE-2014-125118: A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The appl A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username to inject arbitrary commands via a specially crafted password value. Successful exploitati
nvd
Microworld Escan Web Management Console vulnerabilities | cvebase