Логотип exploitDog
bind:CVE-2021-39392
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-39392

Количество 2

Количество 2

nvd логотип

CVE-2021-39392

больше 4 лет назад

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-r69j-r7vf-pfx7

больше 3 лет назад

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-39392

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.

CVSS3: 9.8
4%
Низкий
больше 4 лет назад
github логотип
GHSA-r69j-r7vf-pfx7

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.

4%
Низкий
больше 3 лет назад

Уязвимостей на страницу