>> TAG: #remote exploit

AlphaWeb XE – File Upload Remote Code Execution (RCE) (Authenticated)

Purchase Order Management System 1.0 – Remote File Upload

ECOA Building Automation System – ‘multiple’ Cross-Site Request Forgery (CSRF)

ECOA Building Automation System – Directory Traversal Content Disclosure

ECOA Building Automation System – Configuration Download Information Disclosure

ECOA Building Automation System – Cookie Poisoning Authentication Bypass

ECOA Building Automation System – Hard-coded Credentials SSH Access

ECOA Building Automation System – Hidden Backdoor Accounts and backdoor() Function

ECOA Building Automation System – Remote Privilege Escalation

ECOA Building Automation System – Missing Encryption Of Sensitive Information