30 matches found
CVE-2021-27963
SonLogger before 6.4.1 is affected by user creation with any user permissions profile e.g., SuperAdmin. An anonymous user can send a POST request to /User/saveUser without any authentication or session header...
Design/Logic Flaw
SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file...
CVE-2021-27963
SonLogger before 6.4.1 is affected by user creation with any user permissions profile e.g., SuperAdmin. An anonymous user can send a POST request to /User/saveUser without any authentication or session header...
CVE-2021-27963
SonLogger (before 6.4.1) is affected by an insecure user-creation vulnerability: unauthenticated POST requests to /User/saveUser can create users with arbitrary permissions (e.g., SuperAdmin). This could enable account takeover and privilege escalation within the application. Affected product/ver...
CVE-2021-27964
SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file...
CVE-2021-27964
CVE-2021-27964 affects SonLogger prior to 6.4.1. It enables unauthenticated arbitrary file upload via POST to /Config/SaveUploadedHotspotLogoFile without validating file extension/content, enabling remote code execution and potential full server compromise as described in connected sources. Remed...
PT-2021-17697 · Sonlogger · Sonlogger
Name of the Vulnerable Software and Affected Versions: SonLogger versions prior to 6.4.1 Description: The issue allows for Unauthenticated Arbitrary File Upload. An attacker can exploit this by sending a POST request to "/Config/SaveUploadedHotspotLogoFile" without any authentication or session...
Sonlogger 代码问题漏洞
Sonlogger is a Turkish Sonlogger company's application. It provides firewall log analysis and location capabilities. A security vulnerability exists in SonLogger before 6.4.1 that allows unauthenticated upload of arbitrary files. An attacker can send a POST request to...
SonLogger 访问控制错误漏洞
Sonlogger is a Turkish Sonlogger company's application. It provides firewall log analysis and location capabilities. A security vulnerability exists in SonLogger before 6.4.1 that allows unauthenticated uploads of arbitrary files An attacker can send a POST request to /User/saveUser without any...
