CVE-2024-25832: Unrestricted Upload of File with Dangerous Type

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension...

CVE-2024-25833

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database...

CVE-2024-25831

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting XSS vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface...

CVE-2024-25832

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension...

CVE-2024-25833: Improper Neutralization of Special Elements used in an SQL Command

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database...

PT-2024-21147

Name of the Vulnerable Software and Affected Versions F-logic DataCube3 version 1.0 Description The issue is a reflected cross-site scripting XSS vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management...

PT-2024-21148

Name of the Vulnerable Software and Affected Versions F-logic DataCube3 version 1.0 Description The issue allows an unauthenticated malicious actor to execute arbitrary SQL queries in the database due to unauthenticated SQL injection. Recommendations For F-logic DataCube3 version 1.0, consider...

CVE-2024-25830

The F-logic DataCube3 v1.0 terminal measurement system is vulnerable to Incorrect Access Control (CWE-425) due to improper directory access restrictions. An unauthenticated, remote attacker can exploit this by sending a URI containing the path of the configuration file, potentially allowing them ...

CVE-2024-25831

Summary: CVE-2024-25831 concerns F-Logic DataCube3 v1.0 with a reflected XSS vulnerability caused by improper input sanitization. The issue allows an authenticated, remote attacker to execute arbitrary JavaScript in the web management interface. The Red Hat, JVN/JPCERT-related entries and multipl...

CVE-2024-25833

CVE-2024-25833 affects Field Logic DataCube3 v1.0. The available data describe an unauthenticated SQL injection vulnerability allowing an attacker to execute arbitrary SQL queries in the database. The vulnerability is rated critical (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected docu...

CVE-2024-25833

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database...