Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

invigo automatic device management vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2020-10582
A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote malicious users to execute arbitrary SQL requests (including data reading and modification) on the database.
Invigo Automatic Device Management
8.8
CVSSv3
CVE-2020-10580
A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote authenticated malicious users to execute arbitrary PHP code on the server as the user running the application.
Invigo Automatic Device Management
8.8
CVSSv3
CVE-2020-10583
The /admin/admapi.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote authenticated malicious users to execute arbitrary OS commands on the server as the user running the application.
Invigo Automatic Device Management
7.5
CVSSv3
CVE-2020-10579
A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote malicious users to list the content of arbitrary server directories accessible to the user running the application.
Invigo Automatic Device Management
7.5
CVSSv3
CVE-2020-10581
Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) up to and including 5.0 allow remote malicious users to read potentially sensitive data hosted by the application.
Invigo Automatic Device Management
7.5
CVSSv3
CVE-2020-10584
A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote malicious users to read arbitrary server files accessible to the user running the application.
Invigo Automatic Device Management
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook