Streamax Crocus vulnerabilities
9 known vulnerabilities in Streamax Crocus from Shenzhen Ruiming Technology. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Streamax Crocus: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The affected element is an unknown function of the file /DevicePrint.do?Action=ReadTask of the component Parameter Handler. The manipulation of the argument State results in sq
- 7.3 High severity
Streamax Crocus: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. This impacts an unknown function of the file /OperateStatistic.do. The manipulation of the argument VehicleID results in sql injection. The attack can be launched remotely. The ex
- 7.3 High severity
Streamax Crocus: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44. Affected is an unknown function of the file /RemoteFormat.do of the component Endpoint. Such manipulation of the argument State leads to sql injection. It i
- 7.5 High severity
Streamax Crocus: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this issue is the function Download of the file /DeviceFileReport.do?Action=Download. Performing manipulation of the argument FilePath results in path traversal. The a
- 8.8 High severity
Streamax Crocus: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected is the function Query of the file /DeviceState.do?Action=Query. This manipulation of the argument orderField causes sql injection. The attack can be initiated remotely. The e
- 8.8 High severity
Streamax Crocus: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This impacts the function Query of the file /DeviceFault.do?Action=Query. The manipulation of the argument sortField results in sql injection. It is possible to launch the atta
- 8.8 High severity
Streamax Crocus: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This affects the function Query of the file /MemoryState.do?Action=Query. The manipulation of the argument orderField leads to sql injection. It is possible to in
- 8.8 High severity
Streamax Crocus: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The impacted element is the function queryLast of the file /RepairRecord.do?Action=QueryLast. Executing manipulation of the argument orderField can lead to sql injection. The
- 8.8 High severity
Streamax Crocus: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The affected element is the function uploadFile of the file /FileDir.do?Action=Upload. Performing manipulation of the argument File results in unrestricted upload. The a