EUVD-2021-20826

Malware in sbrugna...

CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

Default credentials

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2021-34164

CVE-2021-34164 affects Lizhifaka’s web product (v2.2.0). A permissions issue in the admin/index/email set password path allows an authenticated attacker to execute arbitrary commands. The vulnerability is documented with a high impact (C/H/I/A) and network attack vector, requiring low privileges ...

CVE-2021-34164: Incorrect Default Permissions

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

PT-2023-12247

Name of the Vulnerable Software and Affected Versions LIZHIFAKA version 2.2.0 Description The issue allows an authenticated attacker to execute arbitrary commands via the set password function in the "admin/index/email" location. Recommendations For LIZHIFAKA version 2.2.0, consider disabling the...