Vulnerabilities > AUO

DATE CVE VULNERABILITY TITLE RISK
2019-11-12 CVE-2019-12720 SQL Injection vulnerability in AUO Sunveillance Monitoring System & Data Recorder
AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx (MailAdd parameter) SQL Injection.
network
low complexity
auo CWE-89
7.5
2019-11-12 CVE-2019-12719 Unrestricted Upload of File with Dangerous Type vulnerability in AUO Sunveillance Monitoring System & Data Recorder
An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e.
network
low complexity
auo CWE-434
critical
9.8
2019-06-03 CVE-2019-11368 Cross-site Scripting vulnerability in AUO Solar Data Recorder
Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter.
network
low complexity
auo CWE-79
5.4
2019-06-03 CVE-2019-11367 Insufficiently Protected Credentials vulnerability in AUO Solar Data Recorder
An issue was discovered in AUO Solar Data Recorder before 1.3.0.
network
low complexity
auo CWE-522
critical
9.8