Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Evgeniy Ermakov

Researcher fromPositive Technologies Research Team
#10310of 60,386
30.9Total CVSS
Vulnerabilities · 4
Medium
1
High
2
Critical
1
PT-2013-1309
2013-10-03
9.8
CVE-2016-8348
Vertiv
Liebert Sitescan
The issue is related to an XML External Entity (XXE) problem, which is caused by incorrect restriction of XML links to external objects. This can allow a remote attacker to gain access to confidential information by using specially crafted XML requests. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser, causing the application to execute arbitrary code or disclose file contents from a server or connected network.
PT-2013-2529
2013-05-09
7.5
CVE-2013-0684
Invensys
Invensys Wonderware Information Server
A SQL injection issue allows remote attackers to execute arbitrary SQL commands.
PT-2013-2530
2013-05-09
9.3
CVE-2013-0685
Invensys
Invensys Wonderware Information Server
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to unrestricted size and amount values.
PT-2013-2533
2013-05-09
4.3
CVE-2013-0688
Invensys
Invensys Wonderware Information Server
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.