Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-3317

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.

CVSS 3.1 · 8.8 High EPSS 41.4% KEV · Not listed
Vendors
Klogserver
Products
Klog Server
CVE-2020-35729

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

CVSS 3.1 · 9.8 Critical EPSS 88.1% KEV · Not listed
Vendors
Klogserver
Products
Klog Server