Out-of-bounds

A vulnerability, which was classified as critical, has been found in Beijing Baichuo Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument fileupload leads ...

CVE-2024-1253 Byzoro Smart S40 Management Platform Import web.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument fileupload leads to...

CVE-2024-1253

CVE-2024-1253 affects Beijing Baichuo/Byzoro Smart S40 Management Platform up to 20240126. The issue is in the Import Handler’s file_upload handling for /useratte/web.php, where improper handling can cause unrestricted file upload. This enables remote exploitation with high impact to confidential...