Skip to content
OpenAdvisories

Vendor

elecV2

6 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.3

    elecV2 elecV2P URL mock eAxios server-side request forgery

    A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remo…

  • High 7.3

    elecV2 elecV2P rpc pm2run os command injection

    A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The p…