CVE-2021-3317

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shellexec on the original value of the source parameter...

Command injection

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shellexec on the original value of the source parameter...

CVE-2021-3317

KLog Server up to version 2.4.1 is affected by an authenticated command injection vulnerability. The issue arises in async.php, where the source parameter is passed to shell_exec() without proper input validation, allowing an attacker with valid credentials to execute arbitrary commands on the se...

CVE-2021-3317: Improper Neutralization of Special Elements used in an OS Command

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shellexec on the original value of the source parameter...

PT-2021-20057

Name of the Vulnerable Software and Affected Versions KLog Server versions 2.4.1 and earlier Description The issue allows authenticated command injection. This is because async.php calls shell exec on the original value of the source parameter. Recommendations For versions 2.4.1 and earlier,...