CVE-2016-5795
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-5795
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ALC Liebert SiteScan Web、ALC WebCTRL和Carrier i-Vu 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ALC Liebert SiteScan Web、ALC WebCTRL和Carrier i-Vu都是美国Automated Logic Corporation(ALC)公司的产品。ALC Liebert SiteScan Web是一个Web站点；ALC WebCTRL和Carrier i-Vu是楼宇自动化控制系统。 ALC Liebert SiteScan Web 6.5及之前的版本、ALC WebCTRL 6.5及之前的版本和Carrier i-Vu 6.5及之前的版本中存在跨站脚本漏洞。远程攻击可通
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-5795
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-5795
Please Login to view more intelligence information
- https://ics-cert.us-cert.gov/advisories/ICSA-17-150-01x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2016-5795
Same Patch Batch · n/a · 2017-08-31 · 34 CVEs total
| CVE-2017-14060 | ImageMagick 代码问题漏洞 | |
| CVE-2017-14062 | Libidn2 数字错误漏洞 | |
| CVE-2017-14063 | Async Http Client 安全漏洞 | |
| CVE-2017-14054 | FFmpeg 安全漏洞 | |
| CVE-2017-14055 | FFmpeg 安全漏洞 | |
| CVE-2017-14056 | FFmpeg 安全漏洞 | |
| CVE-2017-14057 | FFmpeg 安全漏洞 | |
| CVE-2017-14058 | FFmpeg 资源管理错误漏洞 | |
| CVE-2017-14059 | FFmpeg 安全漏洞 | |
| CVE-2017-14061 | Libidn2 数字错误漏洞 | |
| CVE-2016-0713 | Pivotal Software Cloud Foundry cf-release Gorouter 跨站脚本漏洞 | |
| CVE-2017-13708 | VX Search Enterprise 缓冲区错误漏洞 | |
| CVE-2017-13670 | BlackCat CMS 安全漏洞 | |
| CVE-2017-14048 | BlackCat CMS 安全漏洞 | |
| CVE-2017-14049 | BlackCat CMS 跨站脚本漏洞 | |
| CVE-2017-14050 | BlackCat CMS 安全漏洞 | |
| CVE-2017-14051 | Linux kernel 数字错误漏洞 | |
| CVE-2014-8675 | SOPlanning 安全漏洞 | |
| CVE-2017-14064 | Ruby 安全漏洞 | |
| CVE-2017-14070 | NexusPHP 跨站脚本漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2016-5795
No comments yet