Skip to content
OpenAdvisories

Vendor

ITPison

11 known vulnerabilities.

Products

OMICARD EDM 7 OMICARD EDM 's SMS 3 Contact ITPison 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-48372

    ITPison OMICARD EDM 's SMS - SQL Injection

    ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

    ITPison OMICARD EDM 's SMS
  • Critical 9.8
    CVE-2023-48371

    ITPison OMICARD EDM 's SMS - Arbitrary File Upload

    ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt …

    ITPison OMICARD EDM 's SMS
  • Critical 9.8
    CVE-2023-32753

    ITPison OMICARD EDM - Arbitrary File Upload

    OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

    ITPison Contact ITPison
  • Critical 9.8
    CVE-2022-32965

    ITPison OMICARD EDM - Use of Hard-coded Credentials

    OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.

    ITPison OMICARD EDM
  • Critical 9.8
    CVE-2022-32964

    ITPison OMICARD EDM - SQL Injection

    OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service.

    ITPison OMICARD EDM