CVE-2020-6955
Published Jan 13, 2020An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.
Vendor/product archive
2 CVEs tagged to cayintech / smp-pro4 — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.
An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass pa…