PatchTheCVE: computrolshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-10848: Computrols CBAS 18.0.0 allows Username Enumeration.https://patchthecve.com/cve/CVE-2019-10848.htmlhttps://patchthecve.com/cve/CVE-2019-10848.htmlWed, 17 Jun 2026 02:11:43 +0000MEDIUM 5.3: Computrols CBAS 18.0.0 allows Username Enumeration.CVE-2019-10847: Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.https://patchthecve.com/cve/CVE-2019-10847.htmlhttps://patchthecve.com/cve/CVE-2019-10847.htmlWed, 17 Jun 2026 02:11:43 +0000HIGH 8.8: Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.CVE-2019-10850: Computrols CBAS 18.0.0 has Default Credentials.https://patchthecve.com/cve/CVE-2019-10850.htmlhttps://patchthecve.com/cve/CVE-2019-10850.htmlWed, 17 Jun 2026 02:11:43 +0000CRITICAL 9.8: Computrols CBAS 18.0.0 has Default Credentials.CVE-2019-10849: Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.https://patchthecve.com/cve/CVE-2019-10849.htmlhttps://patchthecve.com/cve/CVE-2019-10849.htmlWed, 17 Jun 2026 02:11:43 +0000HIGH 7.5: Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.CVE-2019-10846: Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login pagehttps://patchthecve.com/cve/CVE-2019-10846.htmlhttps://patchthecve.com/cve/CVE-2019-10846.htmlWed, 17 Jun 2026 02:11:43 +0000MEDIUM 6.1: Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.CVE-2019-10855: Computrols CBAS 18.0.0 mishandles password hasheshttps://patchthecve.com/cve/CVE-2019-10855.htmlhttps://patchthecve.com/cve/CVE-2019-10855.htmlWed, 17 Jun 2026 02:11:44 +0000HIGH 7.5: Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.CVE-2019-10854: Computrols CBAS 18.0.0 allows Authenticated Command Injection.https://patchthecve.com/cve/CVE-2019-10854.htmlhttps://patchthecve.com/cve/CVE-2019-10854.htmlWed, 17 Jun 2026 02:11:44 +0000HIGH 8.8: Computrols CBAS 18.0.0 allows Authenticated Command Injection.CVE-2019-10853: Computrols CBAS 18.0.0 allows Authentication Bypass.https://patchthecve.com/cve/CVE-2019-10853.htmlhttps://patchthecve.com/cve/CVE-2019-10853.htmlWed, 17 Jun 2026 02:11:44 +0000HIGH 8.1: Computrols CBAS 18.0.0 allows Authentication Bypass.CVE-2019-10852: Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by thttps://patchthecve.com/cve/CVE-2019-10852.htmlhttps://patchthecve.com/cve/CVE-2019-10852.htmlWed, 17 Jun 2026 02:11:44 +0000HIGH 8.8: Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.CVE-2019-10851: Computrols CBAS 18.0.0 has hard-coded encryption keys.https://patchthecve.com/cve/CVE-2019-10851.htmlhttps://patchthecve.com/cve/CVE-2019-10851.htmlWed, 17 Jun 2026 02:11:44 +0000MEDIUM 6.5: Computrols CBAS 18.0.0 has hard-coded encryption keys.