Vulnerabilities

TI-2024-06548 CVE-2024-7066 · GHSA-pcmc-h94f-8jr9

F-logic DataCube3 HTTP POST Request config_time_sync.php os command injection

HIGH 70

A vulnerability was found in F-logic DataCube3 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.03366 Published 2024-07-24 No fix listed CWE-78

TI-2024-23120 CVE-2024-34854

F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`

HIGH 82

F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12752 Published 2024-05-28 No fix listed CWE-22

TI-2024-23119 CVE-2024-34852

F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering…

MEDIUM 63

F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php file.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01623 Published 2024-05-28 No fix listed CWE-77

TI-2024-20920 CVE-2024-31750 · GHSA-x8vw-8mw4-42v9

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain…

HIGH 82

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1927 Published 2024-04-18 No fix listed CWE-89

TI-2024-16963 CVE-2024-25833 · GHSA-8mv9-w6jc-hxmg

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow…

HIGH 82

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02831 Published 2024-02-28 No fix listed CWE-89

TI-2024-16962 CVE-2024-25832 · GHSA-3x46-c2g7-344x

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an…

MEDIUM 52

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12825 Published 2024-02-28 No fix listed CWE-434

TI-2024-16961 CVE-2024-25831 · GHSA-gw2f-jv86-5xc3

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS)…

MEDIUM 60

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00551 Published 2024-02-28 No fix listed CWE-79

TI-2024-16960 CVE-2024-25830 · GHSA-h8r9-fvmc-wrrc

F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper…

HIGH 82

F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2403 Published 2024-02-28 No fix listed CWE-22

TI-2023-04902 CVE-2023-5329 · GHSA-g8j7-2rhp-x3w4

Field Logic DataCube4 Web API improper authentication

LOW 35

A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0088 Published 2023-10-02 No fix listed CWE-287

Vulnerabilities

Filters