CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31716

FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2023-31717

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31717

CVE-2023-31717 describes a SQL injection vulnerability in FUXA (open source web-based process visualization) version as affected by the advisory:

CVE-2023-31717

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

CVE-2023-31719

CVE-2023-31719 affects FUXA versions ≤ 1.1.12, with a SQL Injection vulnerability exploitable via the /api/signin endpoint. The Red Hat, GHSA, and OSV listings corroborate the same flaw and its association to FUXA’s signin API. The core impact is high (CVE metrics show P t high across confidentia...

CVE-2023-31717

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

CVE-2023-31718

CVE-2023-31718 affects the open-source web-based visualization tool FUXA up to version 1.1.12 . The vulnerability is described as a Local File Inclusion via the endpoint /api/download . The connected documents confirm the affected product and the specific attack vector, but do not provide concret...

CVE-2023-31716

FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

FUXA SQL Injection Vulnerability

FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA that stems from the presence of a SQL injection vulnerability...

PT-2023-23431 · Fuxa · Fuxa

Name of the Vulnerable Software and Affected Versions: FUXA versions 1.1.12 and earlier Description: The issue allows for Local File Inclusion via the "/api/download" API endpoint. This could potentially be exploited to access sensitive files on the system. Recommendations: For versions 1.1.12 an...

GHSA-R87Q-FQ37-PVR6 A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...

A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2023-33831

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2023-33831

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...

Design/Logic Flaw

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2023-33831

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2023-33831

A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...