Lucene search
K

CVE-2023-3836

🗓️ 22 Jul 2023 18:00:05Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Critical vulnerability in Dahua Smart Park Management up to 20230713 allows unrestricted remote file upload via /emap/devicePoint_addImgIco?hasSubsystem=tru

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Unrestricted Upload of File with Dangerous Type in Dahuasecurity Smart_Parking_Management
30 Aug 202312:11
githubexploit
Circl
CVE-2023-3836
20 Aug 202320:43
circl
CNNVD
Dahua Smart Parking Management 代码问题漏洞
22 Jul 202300:00
cnnvd
Cvelist
CVE-2023-3836 Dahua Smart Park Management unrestricted upload
22 Jul 202318:00
cvelist
Nuclei
Dahua Smart Park Management - Arbitrary File Upload
3 Jun 202606:04
nuclei
NVD
CVE-2023-3836
22 Jul 202318:15
nvd
Prion
Out-of-bounds
22 Jul 202318:15
prion
Positive Technologies
PT-2023-6727 · Dahua · Dahua Smart Parking Management
22 Jul 202300:00
ptsecurity
RedhatCVE
CVE-2023-3836
23 May 202504:07
redhatcve
VulnCheck KEV
VulnCheck KEV: CVE-2023-3836
25 Nov 202300:00
vulncheck_kev
Rows per page
NVD
Vulners
[
  {
    "vendor": "Dahua",
    "product": "Smart Park Management",
    "versions": [
      {
        "version": "20230713",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
hasSubsystempathemap/devicePoint_addImgIco?hasSubsystem=trueUnrestricted file upload via the vulnerable endpoint emap/devicePoint_addImgIco?hasSubsystem=trueCWE-434
uploadpathemap/devicePoint_addImgIco?hasSubsystem=trueUnrestricted file upload via the vulnerable endpoint emap/devicePoint_addImgIco?hasSubsystem=trueCWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 08:18Current
8.1High risk
Vulners AI Score8.1
CVSS 3.16.3 - 9.8
CVSS 26.5
CVSS 36.3
EPSS0.91447
80