Authentication flaw

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...

PT-2006-2125 · Nz · Nz Ecommerce

Name of the Vulnerable Software and Affected Versions: NZ Ecommerce affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the informationID or ParentCategory parameter to "index.php". There is a dispute from the vendor regarding this...