fs-ezviewer vulnerabilities

2 known vulnerabilities in fs-ezviewer from E-WEBInformationCo.. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FS-EZViewer(Web): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-4300Apr 29, 2024E-WEBInformationCo.

  E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remote attacker can obtain the database configuration file path through the webpage source code without login. Accessing this path allows attacker to obtain the database crede

• 8.8 High severity

  FS-EZViewer(Web): Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-1523Feb 15, 2024EC-WEB

  EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. A