CVE-2021-32927 Uffizio GPS Tracker Cross-site Scripting

An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker...

CVE-2021-32927

CVE-2021-32927 affects all versions of Uffizio GPS Tracker and is described as a Cross-Site Scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation. The issue enables an attacker to inject client-side JavaScript into multiple instances, potentially e...

CVE-2021-32929 Uffizio GPS Tracker Cross-site Request Forgery

All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user...

CVE-2021-32929 Uffizio GPS Tracker Cross-site Request Forgery

All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user...

CVE-2021-32929

CVE-2021-32929 affects all versions of Uffizio GPS Tracker and is described as a Cross-site Request Forgery (CSRF) vulnerability that lets an attacker perform unintended actions on behalf of an authenticated user. The Red Hat/ICS/CVE ecosystem and CVE records corroborate that this vulnerability e...

Uffizio GPS Tracker 安全漏洞

Uffizio Gps Tracker is a Gps tracker by Uffizio India. Uffizio GPS Tracker suffers from a security vulnerability that stems from the software's lack of effective restrictions on the types of files that users can upload. An attacker could compromise the web server by uploading and executing a web...

Uffizio GPS Tracker

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Uffizio Equipment: GPS Tracker Vulnerabilities: Improper Access Control, Unrestricted Upload of File with Dangerous Type, Open Redirect, Cross-site Scripting, Cross-site Request Forgery 2. RISK...

Uffizio GPS Tracker 跨站请求伪造漏洞

Uffizio Gps Tracker is a Gps tracker from Uffizio India. Uffizio GPS Tracker suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to gain access to the host computer to view sensitive information, obtain code execution, cause a redirect to an arbitrary...

Uffizio GPS Tracker 跨站脚本漏洞

Uffizio Gps Tracker is a Gps tracker from Uffizio India. Uffizio GPS Tracker suffers from a cross-site scripting vulnerability that can be exploited by an attacker to gain access to the host computer to view sensitive information, obtain code execution, cause a redirect to an arbitrary external...

Uffizio Gps Tracker 输入验证错误漏洞

Uffizio Gps Tracker is a Gps tracker from Uffizio India. The Uffizio GPS Tracker software suffers from an input validation error vulnerability that stems from the software's lack of effective filtering and validation of URL requests. An attacker could use this vulnerability to construct URLs with...

Uffizio Gps Tracker 访问控制错误漏洞

Uffizio Gps Tracker is a Gps tracker from Uffizio India. Uffizio GPS Tracker suffers from an Access Control Error vulnerability that originates when accessed via a browser or a curl operation on a vulnerable host with port 9000 open responds to a JSON body displaying information about the deploye...