EUVD-2019-5692

Malware in sbrugna...

CVE-2019-14521

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...

Path traversal

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...

CVE-2019-14521

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...

CVE-2019-14521

CVE-2019-14521 describes a path traversal vulnerability in the api/admin/logoupload Logo File upload feature of EMCA Energy Logserver 6.1.2, allowing an attacker to upload any file to arbitrary locations on the server via the filename parameter. The issue is caused by insufficient validation of t...

PT-2019-13729

Name of the Vulnerable Software and Affected Versions EMCA Energy Logserver version 6.1.2 Description The issue concerns the api/admin/logoupload Logo File upload feature, which allows attackers to upload files to any location on the server. This is achieved through path traversal in the filename...

CVE-2019-14521: Improper Limitation of a Pathname to a Restricted Directory

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...