Skip to content
OpenAdvisories

Vendor

Byzoro

35 known vulnerabilities.

32 results · Clear filters · Feed

  • Medium 6.3

    Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

    A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestric…

  • Medium 6.3

    Byzoro Smart S80 Management Platform importhtml.php deserialization

    A vulnerability classified as critical has been found in Byzoro Smart S80 Management Platform up to 20240411. Affected is an unknown function of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. It is possible to launch …

  • Medium 4.7

    Byzoro Smart S80 Management Platform userattestation.php unrestricted upload

    A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to …

  • Medium 6.3
    CVE-2024-3346 EPSS 49%

    Byzoro Smart S80 webmailattach.php os command injection

    A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mail_file_path leads to os command injection. The atta…

  • Medium 4.7

    Byzoro Smart S42 Management Platform userattestation.php unrestricted upload

    A vulnerability has been found in Byzoro Smart S42 Management Platform up to 20240219 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument hidwel lea…

  • Medium 4.7

    Byzoro Smart S20 Management Platform sysmanageajax.php sql injection

    A vulnerability, which was classified as critical, was found in Byzoro Smart S20 Management Platform up to 20231120. This affects an unknown part of the file /sysmanage/sysmanageajax.php. The manipulation of the argument id leads to sql injection. It is possi…

  • Medium 4.7

    Byzoro Smart S40 Management Platform Import web.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of t…

  • Medium 6.3
    CVE-2024-0939 Scanner template EPSS 44%

    Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

    A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upl…

  • Medium 6.3

    Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload

    A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php of the component HTTP POST Request Handler. The ma…

  • Medium 6.3
    CVE-2023-7039 EPSS 14%

    Byzoro S210 importexport.php injection

    A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to injection. It is possible to launch the attack remotely. The expl…

  • Medium 4.3

    Byzoro PatrolFlow 2530Pro mailsendview.php path traversal

    A vulnerability was found in Byzoro PatrolFlow 2530Pro up to 20231126. It has been rated as problematic. This issue affects some unknown processing of the file /log/mailsendview.php. The manipulation of the argument file with the input /boot/phpConfig/tb_admi…

  • Medium 6.3

    Byzoro S210 HTTP POST Request uploadfile.php unrestricted upload

    A vulnerability was found in Byzoro S210 up to 20231123. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php of the component HTTP POST Request Handler. The manipulation of the argument file_upload leads …

  • Medium 6.3

    Byzoro S210 HTTP POST Request repair.php sql injection

    A vulnerability was found in Byzoro S210 up to 20231121. It has been classified as critical. This affects an unknown part of the file /Tool/repair.php of the component HTTP POST Request Handler. The manipulation of the argument txt leads to sql injection. It …

  • Medium 6.3

    Byzoro Smart S20 HTTP POST Request updateos.php unrestricted upload

    A vulnerability was found in Byzoro Smart S20 up to 20231120 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php of the component HTTP POST Request Handler. The manipulation of the argument 1_fi…

  • Medium 6.3

    Byzoro Smart S80 PHP File updatelib.php unrestricted upload

    A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument…

  • Medium 4.3

    Byzoro Smart S85F Management Platform login.php password recovery

    A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txt_newpwd leads to weak password recovery. The exp…

  • Medium 4.7
    CVE-2023-5684 EPSS 27%

    Byzoro Smart S85F Management Platform importexport.php os command injection

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The …

  • Medium 6.3

    Byzoro Smart S85F Management Platform importconf.php os command injection

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btn_file_renew leads to os command…

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injection

    A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this issue is some unknown functionality of the file /log/download.php. The manipulation of the …

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload

    A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulat…

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload

    A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument…

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This issue affects some unknown processing of the file /sysmanage/updatelib.php. The manipulati…

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted upload

    A vulnerability classified as critical was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This vulnerability affects unknown code of the file /useratte/userattestation.php. The manipulation of the argum…

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

    A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument file_upload…

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

    A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulat…

  • Medium 6.3
    CVE-2023-4873 EPSS 22%

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection

    A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql …

  • Medium 6.3

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injection

    A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation lea…

  • Medium 6.3

    Byzoro Smart S85F Management Platform updateos.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload…

  • Medium 4.3

    Byzoro Smart S85F Management Platform php.ini direct request

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated …

  • Medium 6.3

    Byzoro Smart S85F Management Platform decodmail.php command injection

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to comm…

  • Medium 6.3

    Byzoro Smart S85F Management Platform unrestricted upload

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the att…

  • Medium 6.3
    CVE-2023-4120 EPSS 62%

    Byzoro Smart S85F Management Platform importhtml.php command injection

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack ma…