Oaklouds Portal vulnerabilities
2 known vulnerabilities in Oaklouds Portal from HGiga. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest first
- 9.8 Critical severity
HGiga OAKlouds: Unrestricted Upload of File with Dangerous Type
HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.
- 8.8 High severity
OAKlouds: Improper Neutralization of Special Elements used in an SQL Command
OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.