Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass. This issue affects Lockcell: before 15.
Product
TMT Lockcell vulnerabilities
4 published CVES affecting TMT Lockcell, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 4
- High
- 0
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest TMT Lockcell CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 1.3%
-
CriticalCVSS 9.8 EPSS 3.7%
Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.
-
CVE-2023-3048 IDOR in TMT's Lockcell
PublishedCriticalCVSS 9.8 EPSS 1.3%Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.
-
CVE-2023-3047 SQLi in TMT's Lockcell
PublishedCriticalCVSS 9.8 EPSS 1.7%Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.