CyberSec.Space Logo
返回 CVE 浏览器

CVE-2019-11233

HIGH
7.5
CVSS Severity Score
EPSS Score0.1380%
EPSS Percentile21.98th
Published2019年6月19日
Last Modified2024年11月21日

Vulnerability Description

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGIN_ID element to the auth/main/asp/check_user_login_info.aspx URI, and then reading the response, as demonstrated by the KW_EMAIL or KW_TEL field.

Affected Platforms (CPE)

📦
Eic

Biyan

>= 1.57 and <= 2.8

References & Advisories

🔗 https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f
🔗 https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f

相关漏洞威胁

CVE-2019-112329.8

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sendin...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...