Read the docs

Uatech

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Uatech records in CISA KEV

No Uatech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Badaso 9 records HIGH

Records

9 records

TI-2022-20103 CVE-2022-41711 · GHSA-fwvc-9xhj-26v5

Unrestricted file upload in Badaso

Priority HIGH 82

Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0208 Published 2022-10-25 Fixed in 2.6.1 CWE-434
TI-2022-20097 CVE-2022-41705 · GHSA-g389-rf5p-fg56

Unrestricted file upload in Badaso

Priority HIGH 82

Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02001 Published 2022-11-25 Fixed in 2.7.0 CWE-434
TI-2023-20225 CVE-2023-38974 · GHSA-xhf4-8pfh-6cmf

A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso…

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00458 Published 2023-08-25 No fix listed CWE-79
TI-2023-20222 CVE-2023-38970 · GHSA-7422-7rq6-j4qv

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote…

Priority MEDIUM 58

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00681 Published 2023-08-30 No fix listed CWE-79
Open these records in search →