Vendor archive

cayintech CVEs

Beta · best-effort

4 CVEs tagged to vendor cayintech — 2 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2020-7357

Published Aug 6, 2020

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell comman…

CVSS 9.6 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-7356

Published Aug 6, 2020

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly saniti…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-6955

Published Jan 13, 2020

An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-6954

Published Jan 13, 2020

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass pa…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1