PIAF-HMS ec.php - SQL Injection

claudiopizzillo PIAF-HMS PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1c104212cd62be2bfca21e5 contains multiple unauthenticated SQL injection vulnerabilities. The application has no authentication mechanism and passes user-supplied HTTP parameters...

CVE-2020-21452

An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload...

CVE-2020-21452

An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload...

CVE-2020-21452: Unrestricted Upload of File with Dangerous Type

An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload...

PT-2021-10625

Name of the Vulnerable Software and Affected Versions: uniview ISC2500-S affected versions not specified Description: An issue was discovered where an attacker can upload malicious code via the "Interface/DevManage/EC.php?cmd=upload" endpoint. Recommendations: At the moment, there is no informati...