319 matches found
FUXA local file inclusion vulnerability
FUXA = 1.1.12 is vulnerable to Local File Inclusion via /api/download...
CVE-2023-31717
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
CVE-2023-31718
FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...
CVE-2023-31718
FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...
CVE-2023-31717
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
Sql injection
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
Design/Logic Flaw
FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...
Sql injection
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
Remote Code Execution
FUXA is vulnerable to Remote Command Execution. The vulnerability is due to the lack of sanitization on user supplied input which allows use of dangerous methods at the following affected API route /api/runscript. This can be exploited by an attacker by passing malicious user input to the followi...
CVE-2023-31716
CVE-2023-31716 affects FUXA versions
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
FUXA SQL Injection Vulnerability
FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA version 1.1.12 and earlier, which stems from vulnerability to SQL injection attacks via /api/signin...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
PT-2023-23429 · Fuxa · Fuxa
Name of the Vulnerable Software and Affected Versions: FUXA versions 1.1.12 and earlier Description: The issue is related to a Local File Inclusion vulnerability. It can be exploited via the file parameter, specifically by accessing the fuxa.log file. Recommendations: For versions 1.1.12 and...