Vendor
METZ CONNECT
5 known vulnerabilities.
Products
3 results · Clear filters · Feed
-
High 7.5
Improper access control via php endpoint
Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules.
-
High 8.8
Possible arbitrary code execution
A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.
-
High 8.8
Possible arbitrary file upload
A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution.