Approved changes feed: RSS · Atom

cpe:2.3:a:szjocat:facial_love_cloud_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSzjocat (eae8473a-509d-5478-be74-745f1bcdc34f)
ProductFacial Love Cloud Platform (c06da7a0-8daf-5272-a500-9210fac26df4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6099 vulnerable 2026-06-08 06:19:45.574066 Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management
HIGH (7.3)
A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-11-13T15:31:04.608Z
Updated: 2025-01-08T21:30:08.312Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.