Easy7 Integrated Management Platform vulnerabilities
7 known vulnerabilities in Easy7 Integrated Management Platform from Tiandy. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/GetDBDataEx.jsp. Performing a manipulation of the argument strTBName results in sql injection. Remote ex
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Such manipulation of the argument week leads to os command i
- 9.8 Critical severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/ImportSystemConfiguration.jsp of the component Configuration Handler. The manipulation of the
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This affects an unknown function of the file /rest/preSetTemplate/getRecByTemplateId. The manipulation of the argument ID leads to sql injection. The attack
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId result
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Access Control
A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unknown part of the file /rest/file/uploadLedImage of the component Endpoint. The manipulation of the argument File results in unrestricted upload. The attack may