CVE-2022-45956

Description

References

• packetstormsecurity.com/files/169962/Boa-Web-Server-0.94.13-0.94.14-Authentication-Bypass.html · Exploit

Autres vulnérabilités de boa

• CVE-2022-44117CRITIQUE 9.8Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with …
• CVE-2021-33558ÉLEVÉE 7.5Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, l…
• CVE-2018-21028ÉLEVÉE 7.5Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
• CVE-2018-21027CRITIQUE 9.8Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled.
• CVE-2017-9833ÉLEVÉE 7.5/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root priv…