EDB-21273
PoCEzylog Photovoltaic Management Server - Multiple Vulnerabilities
view exploit source exploit_dbtype webappsauthor Roberto Palearipublished 2012-09-12catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-5864US | high10.0 | Exploit | ||
These Sinapsi devices
do not check if users that visit pages within the device have properly
authenticated. By directly visiting the pages within the device,
attackers can gain… | ||||
| CVE-2012-5863US | high10.0 | Exploit | ||
These Sinapsi devices do not check for special elements in commands sent
to the system. By accessing certain pages with administrative privileges
that do not require authenticati… | ||||
| CVE-2012-5862US | high10.0OT high | Exploit | ||
These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the
hard-coded passwords in the device, attackers can log into the device
with administra… | ||||
| CVE-2012-5861US | high7.5 | Exploit | ||
These Sinapsi devices do not check the validity of the data before
executing queries. By accessing the SQL table of certain pages that do
not require authentication within the de… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan