CVE-2023-3798

CVE-2023-3798 affects Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. The vulnerability is in the file path "/App_Resource/UEditor/server/upload.aspx" where manipulation of the file parameter enables unrestricted file upload. Exploitation status is disclosed publicly in the source...

Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, the vulnerability stems from the parameter file in the file...

PT-2023-26227 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A critical issue has been discovered, affecting the /App Resource/UEditor/server/upload.aspx file, where the manipulation of the file argument leads to...

Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, the vulnerability stems from an unknown function in the file...

CVE-2023-3798: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /AppResource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit...

CVE-2023-3206

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

CVE-2023-3206

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

Input validation

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

CVE-2023-3206 Chengdu VEC40G denial of service

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

CVE-2023-3206

CVE-2023-3206 affects Chengdu VEC40G 3.0. The vulnerability is in the file /send_order.cgi?parameter=restart, where supplying the value reboot can cause a denial of service. It can be exploited remotely and the exploit has been publicly disclosed. Several sources (NVD/Red Hat/CVE lists and third-...

PT-2023-23573 · Unknown · Chengdu Vec40G

Name of the Vulnerable Software and Affected Versions: Chengdu VEC40G version 3.0 Description: A problematic issue was found in the software, affecting an unknown functionality of the file "/send order.cgi?parameter=restart". The manipulation of the restart argument with the input reboot leads to...

CVE-2023-3206: Improper Resource Shutdown or Release

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

CVE-2023-2522

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

CVE-2023-2522

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

Command injection

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

CVE-2023-2522

CVE-2023-2522 affects Chengdu VEC40G 3.0 (Network Detection). The vulnerability lies in the /send_order.cgi?parameter=access_detect endpoint, where manipulating the COUNT argument with input like 3 | netstat -an causes os command injection. Exploitation is remote and has been publicly disclosed. ...

CVE-2023-2522 Chengdu VEC40G Network Detection os command injection

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

CVE-2023-2522: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

PT-2023-19991 · Unknown · Chengdu Vec40G

Name of the Vulnerable Software and Affected Versions: Chengdu VEC40G version 3.0 Description: A critical issue affects an unknown functionality of the file /send order.cgi?parameter=access detect in the Network Detection component. The manipulation of the COUNT argument with the input 3 | netsta...

SQL Injection Vulnerability in the ERP System of Chengdu Pan-Pro Software Development Co.

Chengdu Pan-Pro Software Development Co., Ltd, business scope contains material management system, construction cost management software, contract management system, project progress management system and so on. The ERP system of Chengdu Pan-Pro Software Development Co., Ltd. suffers from a SQL...