All-Dynamics Software vulnerabilities

🔔 Create alert RSS

Published CVEs affecting All-Dynamics Software products: 2 record(s), with severity, exploitation and fixes.

enlogic:show Digital Signage System 1 Digital Signage System 1

Exploited only (KEV) →

CVE-2020-36913 Medium · 5.3 CWE-384 Jan 6, 2026

All-Dynamics Software enlogic:show 2.0.2 Session Fixation Authentication Bypass

All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predefined PHP session identifier during the login process. Attackers can forge HTTP GET requests to welcome.php with a manipulated session token to bypass authentication and potentially execute cross-site request forgery attacks.

CVE-2020-36900 High · 8.8 CWE-352 Dec 10, 2025

All-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User Management

All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.