KTS Mayak ProcessReportGetter File Read

The vulnerability of the /processReportGetter.php component of the KTS “Mayak” is related to errors in the logic of the web application’s operation. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to and read arbitrary files...

energo database Unauthorized Access

The vulnerability of the “energo” database of the “Mayak” system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...