Lucene search
+L

28 matches found

OSV
OSV
•added 2021/02/09 8:15 p.m.•14 views

CVE-2021-26551

An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...

8.8CVSS6AI score0.02609EPSS
SaveExploits3References3
Prion
Prion
•added 2021/02/09 8:15 p.m.•27 views

Code injection

An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...

6CVSS8.9AI score0.02609EPSS
SaveExploits3References3Affected Software1
attackerkb
attackerkb
•added 2021/02/09 8:15 p.m.•9 views

CVE-2021-26551

An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...

8.8CVSS8.3AI score0.02609EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2021/02/09 7:11 p.m.•68 views

CVE-2021-26551

An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...

9.1AI score0.02609EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•2 views

CVE-2021-26551: Improper Control of Generation of Code

An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...

8.8CVSS6.1AI score0.02609EPSS
SaveExploits3References2
Exploit DB
Exploit DB
•added 2021/02/08 12:00 a.m.•385 views

SmartFoxServer 2X 2.17.0 - God Mode Console Remote Code Execution

Exploit Title: SmartFoxServer 2X 2.17.0 - God Mode Console Remote Code Execution Date: 29.01.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.smartfoxserver.com Vendor: gotoAndPlay Product web page: https://www.smartfoxserver.com Affected version: Server: 2.17.0 Remote Admin: 3.2.6...

5.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/02/08 12:00 a.m.•19 views

SmartFoxServer 代码注入漏洞

SmartFoxServer is a software development program for rapid development of multiplayer games and applications via Adobe Flash/Flex/Air, Unity, HTML5, iOS, Universal Windows Platform, Android, Java, C ++, etc. SmartFoxServer is a software development program from SmartFoxServer, USA. The software...

8.8CVSS7.6AI score0.02609EPSS
SaveExploits3References4
Zero Science Lab
Zero Science Lab
•added 2021/02/07 12:00 a.m.•145 views

SmartFoxServer 2X 2.17.0 God Mode Console Remote Code Execution

Summary SmartFoxServer SFS is a comprehensive SDK for rapidly developing multiplayer games and applications with Adobe Flash/Flex/Air, Unity, HTML5, iOS, Universal Windows Platform, Android, Java, C++ and more. SmartFoxServer comes with a rich set of features, an impressive documentation set, ten...

8.8CVSS7.6AI score0.02609EPSS
SaveExploits3
Rows per page
Query Builder