CVE-2021-3005

概要

参考情報

• mk-auth.com.br · Vendor Advisory
• gist.github.com/alacerda/3b925cb333eb839ae808d6f01642aeb3 · Third Party Advisory

mk-auth のその他の脆弱性

• CVE-2023-27246高 8.8An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a c…
• CVE-2021-21495高 8.8MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.
• CVE-2021-21494中 4.8MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (ses…
• CVE-2020-14072緊急 9.8An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts.
• CVE-2020-14071中 6.1An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript …