PT-2019-13729

Name of the Vulnerable Software and Affected Versions EMCA Energy Logserver version 6.1.2 Description The issue concerns the api/admin/logoupload Logo File upload feature, which allows attackers to upload files to any location on the server. This is achieved through path traversal in the filename...

CVE-2019-14521: Improper Limitation of a Pathname to a Restricted Directory

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...