CVE-2018-9161

Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.

• CWE-798

• https://www.exploit-db.com/exploits/44276/Exploit, Third Party Advisory, VDB Entry
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5453.phpThird Party Advisory
• https://www.exploit-db.com/exploits/44276/Exploit, Third Party Advisory, VDB Entry
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5453.phpThird Party Advisory

Published

Mar 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9155Cross-site scripting (XSS) vulnerability in Open-AudIT Profe…
• CVE-2018-9156An issue was discovered on AXIS P1354 (IP camera) Firmware v…
• CVE-2018-9157An issue was discovered on AXIS M1033-W (IP camera) Firmware…
• CVE-2018-9158An issue was discovered on AXIS M1033-W (IP camera) Firmware…
• CVE-2018-9159In Spark before 2.7.2, a remote attacker can read unintended…
• CVE-2018-9160SickRage before v2018.03.09-1 includes cleartext credentials…
• CVE-2018-9162Contec Smart Home 4.15 devices do not require authentication…
• CVE-2018-9163A stored Cross-site scripting (XSS) vulnerability in Zoho Ma…
• CVE-2018-9165The pushdup function in util/decompile.c in libming through …
• CVE-2018-9169Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/pl…
• CVE-2018-9172The Iptanus WordPress File Upload plugin before 4.3.3 for Wo…
• CVE-2018-9173Cross-site scripting (XSS) vulnerability in admin/template/j…