Amodat
amodat
3 CVEs • 2 products
Products (2)
Click to collapseToggle
Products (2)
Click to collapse
CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Amodat 1Mobile Application Gateway Jun 17, 2026 Jun 13, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel. |
1Amodat 1Mobile Application Gateway Jun 17, 2026 Jun 13, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'-- |
Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED. |