Path traversal

A vulnerability was found in Beijing Baichuo PatrolFlow 2530Pro up to 20231126. It has been rated as problematic. This issue affects some unknown processing of the file /log/mailsendview.php. The manipulation of the argument file with the input /boot/phpConfig/tbadmin.txt leads to path traversal...

CVE-2023-6577 Byzoro PatrolFlow 2530Pro mailsendview.php path traversal

A vulnerability was found in Byzoro PatrolFlow 2530Pro up to 20231126. It has been rated as problematic. This issue affects some unknown processing of the file /log/mailsendview.php. The manipulation of the argument file with the input /boot/phpConfig/tbadmin.txt leads to path traversal. The atta...

CVE-2023-6577

CVE-2023-6577 affects Byzoro PatrolFlow 2530Pro up to 20231126. The issue is a path traversal vulnerability in the /log/mailsendview.php endpoint, triggered by manipulating the file argument with input such as /boot/phpConfig/tb_admin.txt. This can lead to remote access to restricted paths. Multi...

Beijing Baichuo PatrolFlow 2530Pro Path Traversal Vulnerability

The Beijing Baichuo PatrolFlow 2530Pro is an Internet behavior management appliance from Beijing Baichuo, China. A path traversal vulnerability exists in the Beijing Baichuo PatrolFlow 2530Pro, which stems from the parameter file in the file /log/mailsendview.php, which can lead to path traversal...