Filtered by vendor Sfcyazilim Subscriptions
Filtered by product Sonlogger Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-27964 1 Sfcyazilim 1 Sonlogger 2024-11-21 9.8 Critical
SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file.
CVE-2021-27963 1 Sfcyazilim 1 Sonlogger 2024-11-21 8.2 High
SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.