CVE-2023-4414

The CVE-2023-4414 entry concerns Byzoro/Beijing Baichuo Smart S85F Management Platform up to 20230807. Affected component: /log/decodmail.php. Issue: manipulation of the file argument leads to remote command injection. Impact is described as critical with high confidentiality, integrity, and avai...

Beijing Baichuo Smart S85F Management Platform 命令注入漏洞

Beijing Baichuo Smart S85F Management Platform is a management platform of Beijing Baichuo Company. Beijing Baichuo Smart S85F Management Platform suffers from a command injection vulnerability that originates in /log/decodmail.php and can lead to SQL injection...

PT-2023-29125 · Beijing Baichuo +1 · Beijing Baichuo Smart S85F Management Platform +1

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S85F Management Platform versions up to 20230807 Beijing Baichuo Smart S85F Management Platform versions up to 20230807 Description: A critical issue has been found, affecting an unknown functionality of the file...

CVE-2023-4121

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

Design/Logic Flaw

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2023-4121 Byzoro Smart S85F Management Platform unrestricted upload

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-4121

CVE-2023-4121 affects Byzoro Smart S85F Management Platform up to 20230722. The issue is an unrestricted file upload caused by manipulation of the file_upload argument, allowing remote exploitation. Multiple connected sources confirm the vulnerability exists in this product/version and can be tri...

CVE-2023-4120

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

CVE-2023-4120

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The...

CVE-2023-4120

CVE-2023-4120 affects Byzoro Smart S85F Management Platform (versions up to 20230722). The vulnerability is in the processing of the file importhtml.php where manipulation of the sql argument leads to remote command injection. Exploitation is possible remotely and has been publicly disclosed per ...

CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

Beijing Baichuo Smart S85F Management Platform Command Injection Vulnerability

Beijing Baichuo Smart S85F Management Platform is a management platform of Beijing Baichuo Company. A command injection vulnerability exists in Beijing Baichuo Smart S85F Management Platform 20230722 and earlier versions, which stems from a SQL injection vulnerability in the parameter sql of the...

PT-2023-27853 · Byzoro · Byzoro Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S85F Management Platform versions up to 20230722 Description: A critical issue affects the processing of the file importhtml.php, where the manipulation of the sql argument leads to command injection. The attack can be initiated...