CVE-2025-10371 eCharge Hardy Barth Salia PLCC api.php unrestricted upload

A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from remote. The exploit has been released ...

CVE-2025-10371

CVE-2025-10371 affects eCharge Hardy Barth Salia PLCC (versions up to 2.3.81, and 2.2.0 cited in PTSecurity) with a vulnerability in the API endpoint /api.php. The issue allows manipulation of the setrfidlist parameter to achieve unrestricted file uploads, and can be exploited remotely. Public Po...