Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Uatech Clear all filters
TI-2023-20222 CVE-2023-38970 · GHSA-7422-7rq6-j4qv

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote…

Priority MEDIUM 58

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00681 Published 2023-08-30 No fix listed CWE-79
TI-2023-20225 CVE-2023-38974 · GHSA-xhf4-8pfh-6cmf

A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso…

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00458 Published 2023-08-25 No fix listed CWE-79
TI-2022-20097 CVE-2022-41705 · GHSA-g389-rf5p-fg56

Unrestricted file upload in Badaso

Priority HIGH 82

Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02001 Published 2022-11-25 Fixed in 2.7.0 CWE-434
TI-2022-20103 CVE-2022-41711 · GHSA-fwvc-9xhj-26v5

Unrestricted file upload in Badaso

Priority HIGH 82

Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0208 Published 2022-10-25 Fixed in 2.6.1 CWE-434