Elcomplus SmartPPT 跨站请求伪造漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. Elcomplus SmartPPT suffers from a cross-site request forgery vulnerability that stems from a web application that cannot or does not adequately verify that a user submitting a request has intentionally...

Elcomplus SmartPPT 跨站脚本漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. A cross-site scripting vulnerability exists in SmartPPT SCADA Server version v1.4, which allows an authenticated attacker to inject arbitrary JavaScript into critical parameters...

PT-2021-6930 · Elcomplus · Elcomplus Smartptt

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...