Количество 3
Количество 3
CVE-2023-3305
A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.
GHSA-w3gq-j6r5-7rw6
A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.
BDU:2023-05854
Уязвимость компонента User Creation Handler файла /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 системы управления данными в реальном времени C-DATA Web Management System, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-3305 A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability. | CVSS3: 7.3 | 0% Низкий | больше 2 лет назад |
| GHSA-w3gq-j6r5-7rw6 A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability. | CVSS3: 7.3 | 0% Низкий | больше 2 лет назад |
 | BDU:2023-05854 Уязвимость компонента User Creation Handler файла /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 системы управления данными в реальном времени C-DATA Web Management System, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу