Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-44159

4MOSAn GCB Doctor - Unrestricted Upload of File

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
4mosan
Products
Gcb Doctor
CVE-2021-42338

4MOSAn GCB Doctor - Improper Authorization

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

CVSS 3.1 · 9.8 Critical EPSS 5.8% KEV · Not listed
Vendors
4mosan
Products
Gcb Doctor