4mosan

Gcb Doctor

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2021-44159

  • EPSS 4.76%
  • Published 20.12.2021 03:15:06
  • Last modified 21.11.2024 06:30:28

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or d...

10

CVE-2021-42338

  • EPSS 0.81%
  • Published 19.11.2021 09:15:06
  • Last modified 21.11.2024 06:27:38

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and executio...