86 matches found
PT-2022-24686 · Unknown · Smart Evision
Name of the Vulnerable Software and Affected Versions: Smart eVision affected versions not specified Description: The issue is related to insufficient authorization for the task acquisition function. An unauthorized remote attacker can exploit this to acquire the Session IDs of other general user...
PT-2022-24685 · Unknown · Smart Evision
Name of the Vulnerable Software and Affected Versions: smart eVision affected versions not specified Description: The issue is related to inadequate authorization for the system information query function. An unauthenticated remote attacker can access sensitive information without being explicitl...
CVE-2022-39034: Improper Limitation of a Pathname to a Restricted Directory
Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication, access restricted paths and download system files...
CVE-2022-39030: Exposure of Sensitive Information to an Unauthorized Actor
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information...
CVE-2022-39029: Exposure of Sensitive Information to an Unauthorized Actor
Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information...
Smart eVision 跨站脚本漏洞
Smart eVision Information Technology Smart eVision is a business intelligence platform of China Union Quan Information Technology Smart eVision Information Technology Company. It can integrate business management rooms, dashboards, reports, and input interfaces for business operations management...
PT-2022-24687 · Unknown · Smart Evision
Name of the Vulnerable Software and Affected Versions: Smart eVision affected versions not specified Description: The issue is related to improper privilege management. A remote attacker with general user privilege can exploit this to escalate to administrator privilege, allowing them to perform...
CVE-2022-39035: Improper Neutralization of Input During Web Page Generation
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS Stored Cross-Site Scripting attack...
Smart eVision 安全漏洞
Smart eVision Information Technology Smart eVision is a business intelligence platform of China Union Quan Information Technology Smart eVision Information Technology Company. Smart eVision is a business intelligence platform that combines business management rooms, dashboards, reports, and input...
CVE-2022-39032: Improper Privilege Management
Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to administrator privilege, and then perform arbitrary system command or disrupt service...
CVE-2022-39033: Improper Limitation of a Pathname to a Restricted Directory
Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricted paths to download and delete...
CVE-2022-39031: Exposure of Sensitive Information to an Unauthorized Actor
Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only...
eVision CMS <= 2.0 (field) SQL Injection Vulnerability
No description provided by source. --+++============================================================+++-- --+++====== eVision CMS = 2.0 SQL Injection Vulnerability ======+++-- --+++============================================================+++-- + Author : darkjoker + Site :...
eVision CMS 2.0 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- eVision CMS 2.0...
eVision CMS 2.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================= eVision CMS 2.0 Remote Code Execution Exploit ============================================= !/usr/bin/perl -----------------------------------------------------------------------------...
eVision CMS 2.0 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- eVision CMS 2.0...
eVision CMS <= 2.0 (field) SQL Injection Vulnerability
No description provided by source. --+++============================================================+++-- --+++====== eVision CMS = 2.0 SQL Injection Vulnerability ======+++-- --+++============================================================+++-- + Author : darkjoker + Site :...
eVision CMS 2.0 - Remote Code Execution
!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- eVision CMS 2.0 http://kent.dl.sourceforge.net/sourceforge/e-vision/eVision-2.0.tar.gz Remote Command Execution...
eVision CMS 2.0 Code Execution
!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- eVision CMS 2.0 http://kent.dl.sourceforge.net/sourceforge/e-vision/eVision-2.0.tar.gz Remote Command Execution...
eVision CMS <= 2.0 (field) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================== eVision CMS 78 79 80 81 82 '.settext$row$GET'field'.' 83 84 '; + It prints admin's pa...