Approved changes feed: RSS · Atom

cpe:2.3:a:auo:sunveillance_monitoring_system_\&_data_recorder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAuo (6187ed74-bb26-5692-b916-54b46e506fae)
ProductSunveillance Monitoring System & Data Recorder (12148914-16cf-56ce-a547-41364ddf423d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12720 vulnerable 2026-06-08 05:12:40.313857 Details available
AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx (MailAdd parameter) SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picture_manage_mvc.aspx plant_no parameter, the swapdl_mvc.aspx plant_no parameter, and the account_management.aspx Text_Postal_Code and Text_Dis_Code parameters.
Published: 2019-11-12T18:26:14.000Z
Updated: 2024-08-04T23:32:54.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12719 vulnerable 2026-06-08 05:12:40.313425 Details available
An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter.
Published: 2019-11-12T18:23:26.000Z
Updated: 2024-08-04T23:32:54.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.