Omicard Edm 'S Sms
Approved changes feed: RSS · Atom
cpe:2.3:a:itpison:omicard_edm_'s_sms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Itpison (b27d7b2a-e828-589d-98de-1aa853b7197c) |
|---|---|
| Product | Omicard Edm 'S Sms (3f58437f-87db-5e88-8c08-df8d9f225cfd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48373 |
vulnerable | 2026-06-08 06:14:27.118627 |
ITPison OMICARD EDM 's SMS - Path Traversal
HIGH (7.5)
ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Published: 2023-12-15T04:27:26.842Z
Updated: 2025-05-21T14:27:59.912Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48372 |
vulnerable | 2026-06-08 06:14:27.118191 |
ITPison OMICARD EDM 's SMS - SQL Injection
CRITICAL (9.8)
ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.
Published: 2023-12-15T04:18:31.142Z
Updated: 2024-08-02T21:30:34.603Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48371 |
vulnerable | 2026-06-08 06:14:27.116937 |
ITPison OMICARD EDM 's SMS - Arbitrary File Upload
CRITICAL (9.8)
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Published: 2023-12-15T04:11:24.574Z
Updated: 2024-08-02T21:30:35.296Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.