C-DATA vulnerabilities

Products

• Web Management System 2

Latest C-DATA CVEs

Newest publication first

1. CVE-2023-3305 C-DATA Web Management System User Creation access control

   Published 2023-06-18

   High·CVSS 7.5

   A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument...

2. CVE-2022-4257 C-DATA Web Management System GET Parameter jumpto.php argument injection

   Published 2022-12-01

   Critical·CVSS 9.8

   A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.