707 matches found
CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection
A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...
CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection
A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...
CVE-2023-4120
CVE-2023-4120 affects Byzoro Smart S85F Management Platform (versions up to 20230722). The vulnerability is in the processing of the file importhtml.php where manipulation of the sql argument leads to remote command injection. Exploitation is possible remotely and has been publicly disclosed per ...
Beijing Baichuo Smart S85F Management Platform Code Issue Vulnerability
Beijing Baichuo Smart S85F Management Platform is a management platform from Beijing Baichuo Corporation. A code issue exists in Beijing Baichuo Smart S85F Management Platform 20230722 and prior versions, where the vulnerability stems from an unrestricted upload via the parameter fileupload...
PT-2023-27854 · Byzoro · Byzoro Smart S85F Management Platform
Name of the Vulnerable Software and Affected Versions: Byzoro Smart S85F Management Platform versions up to 20230722 Description: A critical issue has been found, allowing for unrestricted upload through the manipulation of the file upload argument. This can be exploited remotely. The vendor was...
Beijing Baichuo Smart S85F Management Platform Command Injection Vulnerability
Beijing Baichuo Smart S85F Management Platform is a management platform of Beijing Baichuo Company. A command injection vulnerability exists in Beijing Baichuo Smart S85F Management Platform 20230722 and earlier versions, which stems from a SQL injection vulnerability in the parameter sql of the...
secnet AC Centralized Management Platform 跨站脚本漏洞
secnet AC Centralized Management Platform is an intelligent AC management platform from secnet. A security vulnerability exists in secnet AC Centralized Management Platform version 1.02.040, which stems from a stored cross-site scripting XSS vulnerability...
PT-2023-24989 · Unknown · Ac Centralized Management Platform
Name of the Vulnerable Software and Affected Versions: Annet AC Centralized Management Platform version 1.02.040 Description: The issue is related to Stored Cross-Site Scripting XSS. Recommendations: For Annet AC Centralized Management Platform version 1.02.040, at the moment, there is no...
CVE-2023-34855
A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...
CVE-2023-34855
A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...
Cross site scripting
A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...
D-Link AC Centralized Management Platform 跨站脚本漏洞
D-Link AC Centralized Management Platform is a centralized management platform from China-based D-Link. A security vulnerability exists in D-Link AC Centralized Management Platform v1.02.040, which originates from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitra...
CVE-2023-34855
A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...
CVE-2023-34855
CVE-2023-34855 is an XSS in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040. The vulnerability allows an attacker to upload a crafted HTML file via the upfile.cgi interface, resulting in arbitrary code execution within the affected platform. The issue ...
PT-2023-25036 · Youxun Electronic Equipment (Shanghai) Co. · Ac Centralized Management Platform
Name of the Vulnerable Software and Affected Versions: Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform version 1.02.040 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code via uploading a crafted HTML file to the "upfile.cgi" A...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute cross-site scripting attacks.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
MOXA MXsecurity 命令注入漏洞
Moxa MXsecurity is a management platform from China's Moxa MOXA Inc. It provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. Moxa MXsecurity suffers from a command injection...
Snap One OvrC Cloud 存在输入验证错误漏洞
Snap One OvrC is a free cloud-based remote management and monitoring platform from US-based Snap One. Snap One OvrC Cloud suffers from an input validation error vulnerability that originates from a URL redirection to an untrusted site, which can be exploited by an attacker to redirect a user to a...
