MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMywebsql
APPMywebsql3.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Powiązane podatności
CVE-2019-7730MEDIUM5.7ten sam produkt
MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via the /?q=wrkfrm&...
CVE-2019-7544MEDIUM5.4ten sam produkt
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-si...
CVE-2017-1000011MEDIUM6.1ten sam produkt
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeov...
CVE-2014-4735MEDIUM4.3ten sam produkt
Cross-site scripting (XSS) vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitra...