暂无产品描述。
共找到 4 条公开漏洞记录
The EasyCVR Video Management Platform is vulnerable to user information leakage. This template checks for exposed user information through the endpoint `/api/v1/userlist?pageindex=0&pagesize=10`.
A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
The EasyCVR-video management platform taillog interface has an arbitrary file read vulnerability. Unauthenticated attackers can use this vulnerability to read important system files (such as database configuration files, system configuration files), database configuration files, etc., which puts the website in an extremely insecure state.
EasyCVR video management platform has leaked user information