E-WEBInformationCo. vulnerabilities
We track 2 vulnerabilities in E-WEBInformationCo. products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest E-WEBInformationCo. vulnerabilities
- 9.8 Critical severity
FS-EZViewer(Web): Exposure of Sensitive Information to an Unauthorized Actor
E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remote attacker can obtain the database configuration file path through the webpage source code without login. Accessing this path allows attacker to obtain the database crede
- 8.8 High severity
FS-EZViewer(Web): Improper Neutralization of Special Elements used in an SQL Command
EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. A