CVE-2025-56263

The by-night sms student grade management system (version 1.0 ) is vulnerable to an Arbitrary File Upload vulnerability via the /api/sms/upload/headImg endpoint. The root cause is that the application fails to restrict the type and size of files during the upload process, allowing users to upload...

CVE-2025-56263: Unrestricted Upload of File with Dangerous Type

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

CVE-2014-2946: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.858 allows remote attackers to hijack the authentication of administrators for requests that perform API operations and send SMS messages via a request...