CVE-2024-1254

Summary: CVE-2024-1254 affects Beijing Baichuo / Byzoro Smart S20 Management Platform up to 20231120. The vulnerability is in the file /sysmanage/sysmanageajax.php, where manipulation of the id parameter yields an SQL injection. Exploitation is possible remotely, and public exploits have been dis...

CVE-2024-1253

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument fileupload leads to...

Out-of-bounds

A vulnerability, which was classified as critical, has been found in Beijing Baichuo Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument fileupload leads ...

CVE-2024-1253 Byzoro Smart S40 Management Platform Import web.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument fileupload leads to...

CVE-2024-1253

CVE-2024-1253 affects Beijing Baichuo/Byzoro Smart S40 Management Platform up to 20240126. The issue is in the Import Handler’s file_upload handling for /useratte/web.php, where improper handling can cause unrestricted file upload. This enables remote exploitation with high impact to confidential...

Beijing Baichuo Smart S20 SQL Injection Vulnerability

The Beijing Baichuo Smart S20 is an Internet Behavior Management appliance from Beijing Baichuo, China. A SQL injection vulnerability exists in Beijing Baichuo Smart S20 Management Platform version 20231120 and prior versions, which stems from an incorrect operation of the parameter id that can...

CVE-2024-0939

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...

Out-of-bounds

A vulnerability has been found in Beijing Baichuo Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

CVE-2024-0939

The CVE-2024-0939 entry concerns Byzoro Beijing Baichuo Smart S210 Management Platform (versions up to 20240117). The vulnerability lies in /Tool/uploadfile.php where manipulating the file_upload parameter allows unrestricted file uploads, enabling remote code execution and potentially compromisi...

CVE-2024-0939 Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...

CVE-2024-0716

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2024-0716

CVE-2024-0716 affects Byzoro Smart S150 Management Platform v31R02B15, specifically the Backup File Handler component’s /log/download.php, where manipulation leads to information disclosure. The connected PT-2024-15776 entry provides concrete details: remote initiation is possible, attack complex...

CVE-2024-0716 Byzoro Smart S150 Management Platform Backup File download.php information disclosure

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2024-0716 Byzoro Smart S150 Management Platform Backup File download.php information disclosure

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2024-0712

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit...

Improper access control

A vulnerability was found in Beijing Baichuo Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The...

CVE-2024-0712 Byzoro Smart S150 Management Platform userattea.php access control

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit...

CVE-2024-0712 Byzoro Smart S150 Management Platform userattea.php access control

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit...

CVE-2024-0712

The CVE-2024-0712 entry concerns Byzoro/Beijing Baichuo Smart S150 Management Platform (V31R02B15). Affected is an unknown function in the file /useratte/inc/userattea.php, leading to improper access controls. The vulnerability is exploitable remotely, and public exploits have been disclosed. Mul...

CVE-2024-0300

A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php of the component HTTP POST Request Handler. The manipulation of the argument webimg lead...