CVE-2023-3048

CVE-2023-3048 affects TMT Lockcell prior to version 15, where an authorization bypass is possible via a user-controlled key, enabling authentication abuse. The core issue is an IDOR-style authorization bypass that, according to the CVE entry, affects Lockcell versions before 15. Publicly availabl...

CVE-2023-3047

CVE-2023-3047 concerns an SQL Injection in the TMT Lockcell product prior to version 15, caused by improper neutralization of special elements in SQL commands. Affected software: Lockcell before 15. Root cause: unsafely constructed SQL queries via user-controlled input. Impact per sources: high s...

CVE-2023-3047 SQLi in TMT's Lockcell

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15...

CVE-2023-3047 SQLi in TMT's Lockcell

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15...

TMT Lockcell 代码问题漏洞

TMT Lockcell is an application from TMT Corporation. A code issue vulnerability exists in versions prior to TMT Lockcell 15, which stems from the fact that there is no limit to the number of uploads of a dangerous type of file, which can be exploited by an attacker to perform a command injection...

TMT Lockcell 安全漏洞

TMT Lockcell is an application from TMT. A security vulnerability exists in versions prior to TMT Lockcell 15. An attacker could abuse authentication and bypass authentication by exploiting the vulnerability...

PT-2023-22726

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15 Description The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows Command Injection in TMT Lockcell. Recommendations For versions prior to 15, update to version...

PT-2023-22736

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15 Description The issue is related to the reliance on cookies without validation and integrity checking in a security decision, which allows for privilege abuse and authentication bypass. Recommendations For...

TMT Lockcell 安全漏洞

TMT Lockcell is an application from TMT Corporation. A security vulnerability exists in versions prior to TMT Lockcell 15 that stems from a reliance on unverified and integrity-checked cookies in a security decision vulnerability, which can be exploited by an attacker to abuse privileges and bypa...

TMT Lockcell SQL注入漏洞

TMT Lockcell is an application from TMT Corporation. A SQL injection vulnerability exists in versions prior to TMT Lockcell 15, which stems from improper neutralization of special elements used...

PT-2023-22718

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows for Authentication Abuse and Authentication Bypass. Recommendations For versions prior to 15,...