TI-2019-09968 CVE-2019-13285 · GHSA-xr27-wwfr-j97v
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.
Priority LOW 35
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.
3 records
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.
SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified paramet…
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.