Iblsoft Online Weather
3 CVEs affecting Iblsoft Online Weather. Latest disclosed: 2020-02-26. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9406 | Critical | 9.8 | 2020-02-26 | IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service. |
CVE-2020-9405 | Medium | 6.1 | 2020-02-26 | IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page. |
CVE-2020-9407 | Medium | 5.3 | 2020-02-26 | IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie. |