CVE Intelligence

All-Dynamics Software enlogic:show Digital Signage System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting All-Dynamics Software enlogic:show Digital Signage System: 1 record(s), with affected versions and fixes.

CVE-2020-36913 Medium · 5.3 CWE-384 Jan 6, 2026
All-Dynamics Software enlogic:show 2.0.2 Session Fixation Authentication Bypass
All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predefined PHP session identifier during the login process. Attackers can forge HTTP GET requests to welcome.php with a manipulated session token to bypass authentication and potentially execute cross-site request forgery attacks.