Elcomplus SmartPPT 信息泄露漏洞

Elcomplus SmartPPT SCADA Server is an integrated voice and data scheduling software from Elcomplus, Inc. Elcomplus SmartPPT SCADA Server 1.4 is vulnerable to an information disclosure vulnerability that could be exploited by an unauthenticated attacker to request various files from the server...

Elcomplus SmartPPT 跨站请求伪造漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. Elcomplus SmartPPT suffers from a cross-site request forgery vulnerability that stems from a web application that cannot or does not adequately verify that a user submitting a request has intentionally...

PT-2021-6930 · Elcomplus · Elcomplus Smartptt

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...