cmsv6 vulnerabilities

2 known vulnerabilities in cmsv6 from Tongtianxing Technology Co Ltd. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  cmsv6: Improper Privilege Management

  CVE-2024-29667Mar 29, 2024Tongtianxing Technology Co Ltd

  SQL Injection vulnerability in Tongtianxing Technology Co., Ltd CMSV6 v.7.31.0.2 through v.7.31.0.3 allows a remote attacker to escalate privileges and obtain sensitive information via the ids parameter.

• 9.8 Critical severity

  cmsv6: Use of Default Password

  CVE-2024-29666Mar 25, 2024Tongtianxing Technology Co Ltd

  Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component.