CVE-2024-34852

F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiverschedule.php file. An unauthenticated remote attacker can exploit this vulnerability by sending a file name containing command injection. Successful...

CVE-2024-34854: Improper Limitation of a Pathname to a Restricted Directory

F-logic DataCube3 v1.0 is vulnerable to File Upload via /admin/transceiverschedule.php...

CVE-2024-34852: Improper Neutralization of Special Elements used in a Command

F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiverschedule.php file. An unauthenticated remote attacker can exploit this vulnerability by sending a file name containing command injection. Successful...