[webapps] ECOA Building Automation System – Local File Disclosure

[local] ECOA Building Automation System – Missing Encryption Of Sensitive Information

[webapps] ECOA Building Automation System – Remote Privilege Escalation

[webapps] ECOA Building Automation System – Hidden Backdoor Accounts and backdoor() Function

[remote] ECOA Building Automation System – Hard-coded Credentials SSH Access

[webapps] ECOA Building Automation System – Cookie Poisoning Authentication Bypass

[webapps] ECOA Building Automation System – Configuration Download Information Disclosure

[webapps] ECOA Building Automation System – Directory Traversal Content Disclosure

[webapps] ECOA Building Automation System – 'multiple' Cross-Site Request Forgery (CSRF)