CVE-2021-26550

概要

参考情報

• packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html · Exploit
• smartfoxserver.com · Product
• zeroscience.mk/en/vulnerabilities · Exploit
• zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php · Exploit

smartfoxserver のその他の脆弱性

• CVE-2021-26551高 8.8An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mech…
• CVE-2021-26549中 5.4An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned …