All packages
TecnoVISION DLX Spot Player4 vulnerabilities
3 known CVE vulnerabilities in TecnoVISION DLX Spot Player4, translated and rated.
- CVE-2017-12929High
In TecnoVISION DLX Spot Player4 version >1.5.10, there is an arbitrary file upload vulnerability in resource.php that allows remote authenticated users to upload arbitrary files leading to remote command execution.
- CVE-2017-12930Critical
SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.
- CVE-2017-12928Critical
In TecnoVISION DLX Spot Player4 (all known versions), a hard-coded password 'tecn0visi0n' for the dlxuser account allows remote attackers to log in via SSH.