CVE-2025-10371

CVE-2025-10371 affects eCharge Hardy Barth Salia PLCC (versions up to 2.3.81, and 2.2.0 cited in PTSecurity) with a vulnerability in the API endpoint /api.php. The issue allows manipulation of the setrfidlist parameter to achieve unrestricted file uploads, and can be exploited remotely. Public Po...

PT-2025-37390

Name of the Vulnerable Software and Affected Versions: eCharge Hardy Barth Salia PLCC version 2.2.0 Description: A security flaw exists in eCharge Hardy Barth Salia PLCC 2.2.0 related to unrestricted upload. The issue affects processing of the file /api.php. Manipulation of the setrfidlist argume...

eCharge Hardy Barth Salia PLCC 代码问题漏洞

The eCharge Hardy Barth Salia PLCC is a charging post controller from eCharge Germany. A code issue vulnerability exists in eCharge Hardy Barth Salia PLCC version 2.2.0, which stems from incorrect manipulation of the parameter setrfidlist in file/api.php, which could lead to arbitrary file upload...