| Название | Information leakage of Kejue charging pile intelligent management platform |
|---|
| Описание | Vulnerabilities were found in Kejue charging pile intelligent management platform. When the user directly enters the page, he can directly call the API of the charging pile without authorization. This software will not synthesize or wrongly input the user-controlled input before the user-controlled input is put in the webpage output provided to other users before the function, which has caused great influence on the integrity and information leakage. |
|---|
| Источник | ⚠️ https://github.com/2714925725/CMS-bug/blob/main/ChargingStation–1.md |
|---|
| Пользователь | mengleng (UID 43260) |
|---|
| Представление | 29.03.2023 16:59 (4 лет назад) |
|---|
| Модерация | 05.04.2023 08:43 (7 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 224237 [Xunrui CMS 4.61 main.html раскрытие информации] |
|---|
| Баллы | 0 |
|---|