CVE-2023-4873

The CVE-2023-4873 entry concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230906). Affects an unknown function in /importexport.php where manipulating the sql argument triggers an OS command injection. Exploitation can be carried out remotely, and pu...

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform Operating System Command Injection Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. The Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform suffers from an...

Arbitrary File Read Vulnerability in Reporter of Beijing Huaqing Xin'an Technology Co.

Beijing Huaqing Xinan Technology Co., Ltd. is a network security enterprise, a national high-tech enterprise and Zhongguancun high-tech enterprise. Reporter of Beijing Huaqing Xinan Technology Co., Ltd. has an arbitrary file reading vulnerability that can be exploited by attackers to obtain...

Sql injection

A vulnerability was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The atta...

File upload vulnerability in SuperMap iServer of Beijing SuperMap Software Co. Ltd (CNVD-2023-76221)

SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel. A file upload vulnerability exists in SuperMap iServer of Beijing SuperMap Software Co. Ltd, which can be exploited by attackers to gain server privileges...

CVE-2023-4745

CVE-2023-4745 concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230822). Multiple sources confirm a vulnerability in the unknown functionality of /importexport.php that leads to SQL injection. The issue can be triggered remotely over the network and ...

CVE-2023-4739

Beijing Baichuo Smart S85F Management Platform up to 20230820 is affected by a vulnerability in /sysmanage/updateos.php where manipulation of the 1_file_upload argument leads to unrestricted remote file upload. The issue is described as critical with remote exploit potential and the exploit is pu...

Beijing Baichuo Smart S85F Management Platform Code Issue Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. A code issue vulnerability exists in the Beijing Baichuo Smart S85F Management Platform, which originates from the...

PT-2023-30438 · Beijing Baichuo · Beijing Baichuo Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S85F Management Platform up to 20230820 Description: A critical issue has been found in the Smart S85F Management Platform, affecting some unknown functionality of the file /sysmanage/updateos.php. The manipulation of th...

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform SQL Injection Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform suffers from a SQL injecti...

Improper access control

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230816. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access controls. The exploit has been...

CVE-2023-4546

CVE-2023-4546 affects Byzoro/Beijing Baichuo Smart S85F Management Platform up to version 20230816. The vulnerability concerns an unknown functionality in the file /sysmanage/licence.php, where manipulation leads to improper access controls. Exploitation has been disclosed publicly and may be use...

Design/Logic Flaw

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has bee...

CVE-2023-4544

CVE-2023-4544 affects Beijing Baichuo/Beijing Baichuo Smart S85F Management Platform (and variants named Byzoro/Beizuo in sources) up to version 20230809. The root cause is improper handling of the file /config/php.ini, enabling a direct request that can be triggered remotely. Public disclosure o...

PT-2023-29551 · Beijing Baichuo · Beijing Baichuo Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S85F Management Platform up to 20230809 Description: A vulnerability was found in the processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit ha...

Beijing Baichuo Smart S85F Management Platform 访问控制错误漏洞

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. An access control error vulnerability exists in Beijing Baichuo Smart S85F Management Platform 20230816 and earlie...

Beijing Baichuo Smart S85F Management Platform 安全漏洞

Beijing Baichuo Smart S85F Management Platform is a management platform from Beijing Baichuo. A security vulnerability exists in Beijing Baichuo Smart S85F Management Platform 20230809 and prior versions, which originates in the file /config/php.ini and results in a direct request...

PT-2023-29553 · Beijing Baichuo · Beijing Baichuo Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S85F Management Platform versions up to 20230816 Description: A vulnerability was found in the Beijing Baichuo Smart S85F Management Platform, affecting an unknown functionality of the file /sysmanage/licence.php. The...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can...

CVE-2023-4414

The CVE-2023-4414 entry concerns Byzoro/Beijing Baichuo Smart S85F Management Platform up to 20230807. Affected component: /log/decodmail.php. Issue: manipulation of the file argument leads to remote command injection. Impact is described as critical with high confidentiality, integrity, and avai...