Smart s200 Management Platform v.S200 - SQL Injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component. id: CVE-2024-27718 info: name: Smart s200 Management Platform v.S200 - SQL Injection author:...

EUVD-2024-44471

Malicious code in bioql PyPI...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

CVE-2024-4904

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

CVE-2024-4904

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

CVE-2024-4904 Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

CVE-2024-4904

The CVE-2024-4904 entry concerns Byzoro Smart S200 Management Platform (up to 20240507). The issue is triggered by improper handling of the web_img argument in the file path /useratte/userattestation.php, enabling unrestricted file upload. This could potentially allow remote attackers to upload a...

CVE-2024-4904 Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

PT-2024-33323

Name of the Vulnerable Software and Affected Versions Byzoro Smart S200 Management Platform versions up to 20240507 Description A critical issue affects the processing of the file /useratte/userattestation.php, where the manipulation of the web img argument leads to unrestricted upload. The attac...

Baizhuo Network Smart s200 Management Platform code-related vulnerabilities

Baizhuo Network Smart s200 Management Platform is a network management platform from Baizhuo, China. A code issue vulnerability exists in Baizhuo Network Smart s200 Management Platform version 20240507 and prior versions, which stems from an incorrect operation of the parameter webimg that can le...

CVE-2024-4904: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

Sql injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

CVE-2024-27718

The Baizhuo Network Smart s200 Management Platform v.S200 is vulnerable to an SQL Injection vulnerability in the /importexport.php component. This flaw allows a local attacker to extract sensitive database information and escalate privileges. While specific exploit details are not provided beyond...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

CVE-2024-27718: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

Weak Password Vulnerability in Beijing Byzoro Networks Smart S200

Beijing Byzoro Networks Technology Co., Ltd Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet by providing a full range of security solutions for industry users around the direction of network security business. Beijing Byzoro Networks Smart S200...