CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

OSV•added 2021/01/04 3:15 a.m.•9 views

CVE-2021-21494

MK-AUTH through 19.01 K4.9 allows XSS via the admin/logsajax.php tipo parameter. An attacker can leverage this to read the centralmka2 session token cookie, which is not set to HTTPOnly...

4.8CVSS5.8AI score0.00512EPSS

SaveExploits1References2

ATTACKERKB•added 2021/01/04 3:15 a.m.•5 views

CVE-2021-21494

MK-AUTH through 19.01 K4.9 allows XSS via the admin/logsajax.php tipo parameter. An attacker can leverage this to read the centralmka2 session token cookie, which is not set to HTTPOnly...

4.8CVSS5.9AI score0.00512EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by