CVE Feed

    Dashboard / CVE / CVE-2024-25831

    CVE-2024-25831

    F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

    Published:Feb 28, 2024
    Last Modified:Jan 16, 2025
    EPS:Feb 28, 2024
    EPSS Score:0.00121
    CVSS Score:5.4

    Affected Products

    Vendor
    F-logic
    Product
    Datacube3

    Exploits

    https://neroteam.com/blog/f-logic-datacube3-vulnerability-reporthttps://neroteam.com/blog/f-logic-datacube3-vulnerability-report

    Related CVEs

    CVE-2024-7066 (CVSS 6.9) — A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnera…
    CVE-2024-34854 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`…
    CVE-2024-34852 (CVSS 6.3) — F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execut…
    CVE-2024-31750 (CVSS 9.8) — SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive informatio…
    CVE-2024-25832 (CVSS 8.8) — F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious…
    CVE-2024-25833 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated ma…
    CVE-2024-25830 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restricti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High