F-Logic Datacube3
8 CVEs affecting F-Logic Datacube3. Latest disclosed: 2024-07-24. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34854 | Critical | 9.8 | 2024-05-28 | F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.` |
CVE-2024-31750 | Critical | 9.8 | 2024-04-19 | SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter. |
CVE-2024-25833 | Critical | 9.8 | 2024-02-29 | F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in… |
CVE-2024-25830 | Critical | 9.8 | 2024-02-29 | F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can explo… |
CVE-2024-25832 | High | 8.8 | 2024-02-29 | F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by mani… |
CVE-2024-7066 | High | 7.3 | 2024-07-24 | A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /a… |
CVE-2024-34852 | Medium | 6.3 | 2024-05-28 | F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php… |
CVE-2024-25831 | Medium | 5.4 | 2024-02-29 | F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote… |