CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31717

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

CVE-2023-31716

FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2023-31716

FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

Sql injection

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

Sql injection

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

Design/Logic Flaw

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

Remote Code Execution

FUXA is vulnerable to Remote Command Execution. The vulnerability is due to the lack of sanitization on user supplied input which allows use of dangerous methods at the following affected API route /api/runscript. This can be exploited by an attacker by passing malicious user input to the followi...

PT-2023-23429 · Fuxa · Fuxa

Name of the Vulnerable Software and Affected Versions: FUXA versions 1.1.12 and earlier Description: The issue is related to a Local File Inclusion vulnerability. It can be exploited via the file parameter, specifically by accessing the fuxa.log file. Recommendations: For versions 1.1.12 and...

CVE-2023-31716

FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2023-31716

CVE-2023-31716 affects FUXA versions

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

FUXA SQL Injection Vulnerability

FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA version 1.1.12 and earlier, which stems from vulnerability to SQL injection attacks via /api/signin...

CVE-2023-31719: Improper Neutralization of Special Elements used in an SQL Command

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31716

FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...