Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mobatime Component: Mobatime Web Application Clear all filters
TI-2023-02840 CVE-2023-3033 · GHSA-2gwc-3c7p-cjfq

Mobatime web application - broken authorisation mechanisms

Priority HIGH 73

Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00602 Published 2023-06-02 No fix listed CWE-863
TI-2023-02839 CVE-2023-3032 · GHSA-95gq-vgg7-x3mr

Mobatime web application - Arbitrary file upload (RCE)

Priority HIGH 73

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modules) allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0082 Published 2023-06-02 No fix listed CWE-434