Ivan Poliyanchuk

Researcher fromPositive Technologies Research Team
#10445of 60,378
30.4Total CVSS
Vulnerabilities · 4
Medium
1
High
3
PT-2013-2529
2013-05-09
7.5
CVE-2013-0684
Invensys
Invensys Wonderware Information Server
A SQL injection issue allows remote attackers to execute arbitrary SQL commands.
PT-2013-2530
2013-05-09
9.3
CVE-2013-0685
Invensys
Invensys Wonderware Information Server
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to unrestricted size and amount values.
PT-2013-2531
2013-05-09
9.3
CVE-2013-0686
Invensys
Invensys Wonderware Information Server
The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
PT-2013-2533
2013-05-09
4.3
CVE-2013-0688
Invensys
Invensys Wonderware Information Server
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.