Vulnerabilidades de All-Dynamics Software
CVEs publicadas que afetam produtos de All-Dynamics Software: 2 registro(s), com severidade, exploração e correções.
CVE-2020-36913
Média · 5.3
CWE-384 06/01/2026
All-Dynamics Software enlogic:show 2.0.2 Session Fixation Authentication Bypass
All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predefined PHP session identifier during the login process. Attackers can forge HTTP GET requests to welcome.php with a manipulated session token to bypass authentication and potentially execute cross-site request forgery attacks.
CVE-2020-36900
Alta · 8.8
CWE-352 10/12/2025
All-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User Management
All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.