PT-2021-3204

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to an unlimited file upload vulnerability in the database update module of the WorkFlow system, which can allow an attacker to execute arbitrary code by replacing the...

PT-2021-3209

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to a module for creating, editing, and saving scheme types of typical and working business processes, defining business process properties, and creating lists of...

PT-2021-3200

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the "ЛОЦМАН Дизайнер форм" module in the LOTCMAN:PLM system, which allows for unlimited upload of dangerous file types. This can be exploited to execute arbitrary...

PT-2021-3201

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the "ЛОЦМАН Справочник структурных подразделений" module in the LOTCMAN:PLM system, which allows for unlimited upload of dangerous file types. This enables an...

PT-2021-3207

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the route development module of the LOTCMAN:PLM system. This could allow an attacker to execute arbitrary code by...

PT-2021-3220

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the data synchronization module, which can be exploited at any time on demand by a user or by a special utility scheduler. This vulnerability allows for unlimited...