CVE-2023-5494

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (versions up to 20230928) contains an OS command injection vulnerability in the /log/download.php endpoint. The issue arises from manipulating the file argument, allowing remote exploitation. Public disclosures exist (...

CVE-2023-5493 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload

A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument fileupload leads t...

CVE-2023-5493

The vulnerability CVE-2023-5493 affects Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The issue concerns the file /useratte/web.php where manipulation of the file_upload argument enables unrestricted file upload, potentially allowing remote, unau...

CVE-2023-5492

CVE-2023-5492 affects Byzoro/Beijing Baichuo S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The flaw is in /sysmanage/licence.php: manipulation of file_upload enables unrestricted file upload, enabling remote attack. Documentation consistently states an arbitr...

CVE-2023-5492 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted...

CVE-2023-5489

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

CVE-2023-5491 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This issue affects some unknown processing of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to...

CVE-2023-5491

CVE-2023-5491 affects Byzoro Smart S45F and Beijing Baichuo Smart S45F Multi-Service Secure Gateway platforms up to 20230928. A vulnerability in /sysmanage/updatelib.php, specifically the file_upload argument, allows unrestricted upload. The issue can be triggered remotely and an exploit has been...

CVE-2023-5490

CVE-2023-5490 affects the Beijing Baichuo/Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The vulnerability resides in the /useratte/userattestation.php file, where manipulating the web_img argument enables unrestricted file upload, with remote exp...

CVE-2023-5489

CVE-2023-5489 affects the Beijing Baichuo/Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. A code/file-upload issue exists in /Tool/uploadfile.php where manipulating the file_upload argument allows unrestricted file upload, enabling remote initiation....

CVE-2023-5489 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

CVE-2023-5488 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads t...

CVE-2023-5488

The CVE-2023-5488 entry concerns Byzoro/Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. The vulnerability resides in the file /sysmanage/updatelib.php and is triggered by manipulating the file_upload argument, leading to unrestricted file up...

CVE-2023-4873

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...

Command injection

A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection...

CVE-2023-4873 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...

CVE-2023-4873

The CVE-2023-4873 entry concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230906). Affects an unknown function in /importexport.php where manipulating the sql argument triggers an OS command injection. Exploitation can be carried out remotely, and pu...

CVE-2023-4745

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be...

CVE-2023-4745

CVE-2023-4745 concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230822). Multiple sources confirm a vulnerability in the unknown functionality of /importexport.php that leads to SQL injection. The issue can be triggered remotely over the network and ...

CVE-2023-4745 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injection

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be...