Approved changes feed: RSS · Atom

cpe:2.3:a:changing:mobile_one_time_password:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChanging (28c7953a-d2e6-5f3d-ab21-ba497dfbd3f3)
ProductMobile One Time Password (b9ab12fa-a892-57a2-a22c-6377fb10b610)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3123 vulnerable 2026-06-08 06:41:52.530490 CHANGING Mobile One Time Password - Arbitrary File Upload
HIGH (7.2)
CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attackers with administrator privilege can exploit this vulnerability to upload and run malicious file to execute system commands.
Published: 2024-07-01T02:52:34.721Z
Updated: 2024-08-01T19:32:42.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3122 vulnerable 2026-06-08 06:41:52.529375 CHANGING Mobile One Time Password - Arbitrary File Reading
MEDIUM (4.9)
CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.
Published: 2024-07-01T02:39:14.560Z
Updated: 2024-08-01T19:32:42.703Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.