Chengdu vulnerabilities
We track 6 vulnerabilities in Chengdu products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2023.
Latest Chengdu vulnerabilities
- 7.5 High severity
Flash Flood Disaster Monitoring and Warning…: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This issue affects some unknown processing of the file \Service\FileHandler.ashx. The manipulation of the argument FileDirec
- 9.8 Critical severity
Flash Flood Disaster Monitoring and Warning…: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This vulnerability affects unknown code of the file /Service/FileHandler.ashx. The manipulation of the argument userFile leads to unrestricte
- 9.8 Critical severity
Flash Flood Disaster Monitoring and Warning…: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Controller/Ajaxfileupload.ashx. The manipulation of the argument fi
- 9.8 Critical severity
Flash Flood Disaster Monitoring and Warning…: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /App_Resource/UEditor/server/upload.aspx. The manipulation of the argument file lea
- 7.5 High severity
VEC40G: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial
- 7.2 High severity
VEC40G: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=access_detect of the component Network Detection. The manipulation of the argume