Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
invigo automatic device management vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2020-10582
A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote malicious users to execute arbitrary SQL requests (including data reading and modification) on the database.
Invigo Automatic Device Management
8.8
CVSSv3
CVE-2020-10580
A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote authenticated malicious users to execute arbitrary PHP code on the server as the user running the application.
Invigo Automatic Device Management
8.8
CVSSv3
CVE-2020-10583
The /admin/admapi.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote authenticated malicious users to execute arbitrary OS commands on the server as the user running the application.
Invigo Automatic Device Management
7.5
CVSSv3
CVE-2020-10581
Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) up to and including 5.0 allow remote malicious users to read potentially sensitive data hosted by the application.
Invigo Automatic Device Management
7.5
CVSSv3
CVE-2020-10579
A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote malicious users to list the content of arbitrary server directories accessible to the user running the application.
Invigo Automatic Device Management
7.5
CVSSv3
CVE-2020-10584
A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) up to and including 5.0 allows remote malicious users to read arbitrary server files accessible to the user running the application.
Invigo Automatic Device Management
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started