DataCube3 vulnerabilities
4 known vulnerabilities in DataCube3 from F-logic. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
DataCube3: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/config_time_sync.php of the component HTTP POST Request Handler. The manipulation of the argumen
- 9.8 Critical severity
datacube3: Improper Neutralization of Special Elements used in an SQL Command
F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database.
- 8.8 High severity
Datacube3: Unrestricted Upload of File with Dangerous Type
F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.
- 9.8 Critical severity
datacube3: Improper Limitation of a Pathname to a Restricted Directory
F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit coul