| Titre | Information leakage of Kejue charging pile intelligent management platform |
|---|
| Description | Vulnerabilities were found in Kejue charging pile intelligent management platform. When the user directly enters the page, he can directly call the API of the charging pile without authorization. This software will not synthesize or wrongly input the user-controlled input before the user-controlled input is put in the webpage output provided to other users before the function, which has caused great influence on the integrity and information leakage. |
|---|
| La source | ⚠️ https://github.com/2714925725/CMS-bug/blob/main/ChargingStation–1.md |
|---|
| Utilisateur | mengleng (UID 43260) |
|---|
| Soumission | 29/03/2023 16:59 (il y a 4 ans) |
|---|
| Modérer | 05/04/2023 08:43 (7 days later) |
|---|
| Statut | Dupliqué |
|---|
| Entrée VulDB | 224237 [Xunrui CMS 4.61 main.html divulgation d'information] |
|---|
| Points | 0 |
|---|