phpservermon is vulnerable to CRLF Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-4097 · ADVISORY
• phpservermon/phpservermon commit 162bba0 · WEB
• phpservermon/phpservermon · PACKAGE
• huntr.dev/bounties/d617ced7-be06-4e34-9db0-63d45c003a43 · WEB

phpservermon/phpservermon のその他の脆弱性

• CVE-2024-5312中 6.3PHP Server Monitor, version 3.2.0, is vulnerable to an XSS via the /phpservermon-3.2.0/vendor/phpmailer/phpmailer/test_script/index.php page…
• CVE-2021-4241中 5.3A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/ps…
• CVE-2021-4240中 5.3A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the…
• CVE-2018-18921中 6.5PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.