CVE-2019-11232

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0760%

EPSS Percentile1.26th

Published2019年6月19日

Last Modified2024年11月21日

Vulnerability Description

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP_NO element to the kws_login/asp/query_user.asp URI, and then reading the PWD element.

Affected Platforms (CPE)

📦

Eic

Biyan

>= 1.57 and <= 2.8

References & Advisories

🔗 https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f

相关漏洞威胁

CVE-2019-112337.5

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGIN_I...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...