Tosei vulnerabilities
We track 7 vulnerabilities in Tosei products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on February 22, 2026.
Latest Tosei vulnerabilities
- 9.8 Critical severity
Online Store Management System ネット店舗管理システム: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results i
- 7.3 High severity
Self-service Washing Machine: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/tosei_datasend.php. Executing a manipulation of the argument adr_txt_1 can lead to command injection. It is possible to launch the attack rem
- 7.3 High severity
Online Store Management System ネット店舗管理システム: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imode_alldata.php. Executing a manipulation of the argument DevId can lead to command injection. The attac
- 7.5 High severity
online_store_management_system: Improper Limitation of a Pathname to a Restricted Directory
An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attackers to execute a directory traversal.
- 9.8 Critical severity
Online Store Management System ネット店舗管理システム: Use of Default Credentials
A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initi
- 8.8 High severity
Online Store Management System ネット店舗管理システム: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical has been found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This affects an unknown part of the file /cgi-bin/tosei_kikai.php. The manipulation of the argument kikaibangou leads to command injection
- 8.8 High severity
Online Store Management System ネット店舗管理システム: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/p1_ftpserver.php. The manipulation of the argument adr_txt le