F-logic vulnerabilities
We track 5 vulnerabilities in F-logic products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2024.
Latest F-logic vulnerabilities
- 9.8 Critical severity
DataCube3: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/config_time_sync.php of the component HTTP POST Request Handler. The manipulation of the argumen
- 9.8 Critical severity
datacube3: Improper Neutralization of Special Elements used in an SQL Command
F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database.
- 8.8 High severity
Datacube3: Unrestricted Upload of File with Dangerous Type
F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.
- 9.8 Critical severity
datacube3: Improper Limitation of a Pathname to a Restricted Directory
F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit coul
- 7.5 High severity
DataCube4: Improper Authentication
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed t