Dbbroadcast DB Elettronica Telecomunicazioni SpA MOZART DDS NEXT 6000 Firmware

Unauthenticated OS Command Injection (restore_settings.php)

Unauthenticated OS Command Injection (start_upgrade.php)

Unauthenticated Arbitrary File Upload (patch_contents.php)

Unauthenticated Arbitrary File Upload (upgrade_contents.php)

Arbitrary File Overwrite via Tar Extraction Path Traversal

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise.

Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters

Unauthenticated Arbitrary File Upload (status_contents.php)

Unauthenticated Arbitrary File Deletion (patch_contents.php)

Unauthenticated Path Traversal with Arbitrary File Deletion

Unauthenticated Arbitrary File Deletion (upgrade_contents.php)

Unauthenticated Arbitrary File Read via Null Byte Injection

Infinite Loop Denial of Service via Failed File Deletion

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This allows the attacker to execute arbitrary commands on the server, potentially leading to full system compromise.

PostgreSQL SQL Injection (status_sql.php)

Stored Cross-Site Scripting via XML Injection

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's browser, potentially stealing sensitive information, hijacking sessions, or performing unauthorized actions.