F-logic

Datacube3

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2024-34852

Exploit
  • EPSS 2.22%
  • Veröffentlicht 28.05.2024 17:15:10
  • Zuletzt bearbeitet 10.06.2025 17:21:00

F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php file. An unauthenticated remote attacker can exploit this vulnerability by sending a file ...

9.8

CVE-2024-34854

Exploit
  • EPSS 0.77%
  • Veröffentlicht 28.05.2024 17:15:10
  • Zuletzt bearbeitet 10.06.2025 17:19:30

F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`

9.8

CVE-2024-31750

Exploit
  • EPSS 93.64%
  • Veröffentlicht 19.04.2024 00:15:10
  • Zuletzt bearbeitet 10.06.2025 01:32:26

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.

9.8

CVE-2024-25830

Exploit
  • EPSS 35.85%
  • Veröffentlicht 29.02.2024 01:44:16
  • Zuletzt bearbeitet 10.06.2025 19:22:13

F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful ex...

5.4

CVE-2024-25831

Exploit
  • EPSS 0.09%
  • Veröffentlicht 29.02.2024 01:44:16
  • Zuletzt bearbeitet 16.01.2025 17:50:46

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

8.8

CVE-2024-25832

Exploit
  • EPSS 15.02%
  • Veröffentlicht 29.02.2024 01:44:16
  • Zuletzt bearbeitet 27.03.2025 15:15:50

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.

9.8

CVE-2024-25833

Exploit
  • EPSS 0.15%
  • Veröffentlicht 29.02.2024 01:44:16
  • Zuletzt bearbeitet 16.01.2025 17:50:18

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database.