Skip to content
OpenAdvisories

Vendor

Mobatime

7 known vulnerabilities.

Products

Mobatime mobile application AMXGT100 3 Mobatime web application 2 AMX MTAPI 1 AMXGT-100 1 Network Master Clock - DTS 4801 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2023-3066

    Mobatime mobile application - Broken authorisation

    Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20.

    Mobatime Mobatime mobile application AMXGT100
  • High 7.5
    CVE-2023-3064

    Mobatime mobile application - Sensitive information disclosure

    Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mobatime mobile application AMXGT100 through 1.3.20.

    Mobatime Mobatime mobile application AMXGT100
  • High 8.1
    CVE-2023-3032

    Mobatime web application - Arbitrary file upload (RCE)

    Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modules) allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22.

    Mobatime Mobatime web application