PT-2019-12898

Name of the Vulnerable Software and Affected Versions AUO SunVeillance Monitoring System versions prior to 1.1.9e Description The issue allows an attacker to carry a SQL Injection payload to the server, enabling them to read privileged data. This is possible through several parameters, including...

PT-2019-12897

Name of the Vulnerable Software and Affected Versions AUO SunVeillance Monitoring System versions prior to 1.1.9e Description The issue is related to incorrect access control in the Picture Manage mvc.aspx file, allowing an unauthenticated user to upload files by modifying the authority parameter...