CVE-2023-27246

Mô tả

Tham khảo

• IntruderLabs/2023-05-25-ziroudei · Third Party Advisory

Lỗ hổng khác của mk-auth

• CVE-2021-21495CAO 8.8MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.
• CVE-2021-21494TRUNG BÌNH 4.8MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (ses…
• CVE-2021-3005TRUNG BÌNH 4.3MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice n…
• CVE-2020-14072NGHIÊM TRỌNG 9.8An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts.
• CVE-2020-14071TRUNG BÌNH 6.1An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript …