cbcvebase.

Myq-Solution Myq Server vulnerabilities

1 known vulnerability affecting myq-solution/myq_server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-31769P2HIGHCVSS 8.8fixed in 8.22021-06-21
CVE-2021-31769 [HIGH] CWE-78 CVE-2021-31769: MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because admi MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as
nvd
Myq-Solution Myq Server vulnerabilities | cvebase