Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: 6shr System Project Component: 6shr System Clear all filters
TI-2024-07724 CVE-2024-8330 · GHSA-h3rg-qv35-27xm

Gether Technology 6SHR System - Unrestricted File Upload

Priority MEDIUM 41

6SHR system from Gether Technology does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload web shell scripts and use them to execute arbitrary system commands on the se…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0055 Published 2024-08-30 No fix listed CWE-434
TI-2024-07723 CVE-2024-8329 · GHSA-2cvv-v79w-fm34

Gether Technology 6SHR System - SQL Injection

Priority MEDIUM 41

6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers with regular privilege to inject SQL command to read, modify, and delete database contents.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00595 Published 2024-08-30 No fix listed CWE-89