CVE-2022-31164

CVE-2022-31164 affects Tovy, a staff management system for Roblox groups. In versions prior to 0.7.51, the authentication/authorization flow allows a user to log in as another user, including privileged accounts, enabling impersonation. The issue is resolved by upgrading to version 0.7.51 or late...

CVE-2022-31164: Improper Authentication

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51...

Arbitrary File Upload Vulnerability in Staff Management System of Guangzhou Zhongda Dongri Technical Education Co.

Guangzhou Zhongda Dongri Technology Education Co. Ltd. specializes in the development and sales of educational technology. This product is a faculty management system. An arbitrary file upload vulnerability exists in the Faculty and Staff Management System of Guangzhou CUHK Dongri Technology...