CVE-2023-3836

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePointaddImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated...

CVE-2023-3836

creationtimestamp| type| source ---|---|--- 2023-08-20 20:43:57+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8883 2024-09-17 21:30:02+00:00| published-proof-of-concept| https://t.me/codeb0ss/1054 2025-02-20 00:00:00+00:00| exploited| The Shadowserver...

CVE-2023-3836 Dahua Smart Park Management unrestricted upload

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePointaddImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated...

CVE-2023-3836

CVE-2023-3836 affects Dahua Smart Park Management prior to 20230713. Multiple connected sources confirm an unrestricted/unauthorized file upload vulnerability in the endpoint /emap/devicePoint_addImgIco?hasSubsystem=true, enabling remote file upload and potentially remote code execution or full s...