CVE-2019-20385

CVE-2019-20385 affects Logaritmo Aware CallManager 2012 devices. The vulnerability arises from the CSV upload feature in /supervisor/procesa_carga.php, which allows uploading of .php files with a text/* content type. The uploaded PHP code can then be executed by accessing /supervisor/csv/. Red Ha...

CVE-2020-26150

CVE-2020-26150 affects Logaritmo Aware CallManager 2012. The issue originates in info.php, where a direct request invoking phpinfo discloses sensitive information to remote attackers. The vulnerability is an information-disclosure flaw; exploitation details and concrete fixes are not provided in ...