PT-2023-30813

Name of the Vulnerable Software and Affected Versions Multisuns EasyLog web+ affected versions not specified Description The issue is related to a path traversal vulnerability within a specific parameter in a URL. This allows an unauthenticated remote attacker to bypass authentication and downloa...

PT-2023-30812

Name of the Vulnerable Software and Affected Versions Multisuns EasyLog web+ affected versions not specified Description The issue is related to the use of hard-coded credentials in Multisuns EasyLog web+. A remote attacker can exploit this to access the system, perform arbitrary system operation...

CVE-2023-48390: Improper Control of Generation of Code

Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service...

CVE-2023-48388: Use of Hard-coded Credentials

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

PT-2023-7873

Name of the Vulnerable Software and Affected Versions Multisuns EasyLog web+ affected versions not specified Description The issue is related to incorrect code generation management in the software. It allows an unauthenticated remote attacker to exploit the code injection vulnerability, enabling...

Multisuns EasyLog web+ Security Vulnerability

Multisuns EasyLog web+ is an unattended multi-loop digital telephone recording system from China Huading Multisuns. A security vulnerability exists in Multisuns EasyLog web+ v1.13.2.8, which stems from the use of hard-coded credentials, and can be exploited by remote attackers to gain access to t...

CVE-2023-48389: Improper Limitation of a Pathname to a Restricted Directory

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...