THREATIST.IORead the docs 6 records
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution.
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command.
An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate.
A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25.
All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation.
An authentication bypass was found in an unknown area of the SiteOmat source code.