OpenPLC 代码注入漏洞

OpenPLC is an open source programmable logic controller. It can provide low-cost industrial solutions for automation and research. A code injection vulnerability exists in OpenPLC v3, which originates from the failure of the Hardware Layer Code Box component of the /hardware page of the product's...

CVE-2021-3351

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...

CVE-2021-3351

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...

Cross site scripting

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...

CVE-2021-3351

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...

CVE-2021-3351

OpenPLC runtime V3 (up to 2016-03-14) is affected by a stored XSS on the Device Name field of the Add New Device page. The issue arises from improper handling of input, enabling execution of client-side code. Affected product/version details are stated; no patch/fix is described in the provided d...

CVE-2021-3351

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...

OpenPLC 跨站脚本漏洞

OpenPLC is an open source programmable logic controller. It can provide low-cost industrial solutions for automation and research. A cross-site scripting vulnerability exists in OpenPLC runtime V3, which stems from the Device Name on the Add New Device page of the product failing to properly...

Unspecified Vulnerability in OpenPLC ScadaBR

OpenPLC is an open source programmable logic controller. A security vulnerability exists in OpenPLC ScadaBR, which can be exploited by an attacker to run stored XSS via the systemsettings.shtm page...

CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

Cross site scripting

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

Design/Logic Flaw

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

CVE-2021-26828

CVE-2021-26828 affects ScadaBR/OpenPLC ScadaBR up to 0.9.1 (Linux) and 1.12.4 (Windows). The flaw allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm, i.e., unrestricted file upload leading to remote code execution. Exploitation status varies across sour...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

CVE-2021-26829

OpenPLC ScadaBR is vulnerable to a stored cross-site scripting (XSS) flaw via system_settings.shtm in Linux 0.9.1 and Windows 1.12.4. Root cause: input reflected/stored in the page enabling script execution in a user’s browser. Affected products/versions include OpenPLC ScadaBR prior to a newer r...