Lucene search
+L

6 matches found

Prion
Prion
•added 2021/09/15 5:15 p.m.•29 views

Hardcoded credentials

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...

7.5CVSS9.7AI score0.02259EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/09/15 12:00 a.m.•6 views

PT-2021-22577

Name of the Vulnerable Software and Affected Versions: MyLittleBackup versions up to and including 1.7 Description: The management tool in MyLittleBackup allows remote attackers to execute arbitrary code because the machineKey is hardcoded in web.config, and can be used to send serialized ASP cod...

9.8CVSS0.02259EPSS
SaveExploits0References5
NVD
NVD
•added 2020/05/19 8:15 p.m.•74 views

CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...

9.8CVSS9.8AI score0.77635EPSS
SaveExploits5References2
Prion
Prion
•added 2020/05/19 8:15 p.m.•38 views

Hardcoded credentials

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...

7.5CVSS9.8AI score0.77635EPSS
SaveExploits5References2Affected Software1
attackerkb
attackerkb
•added 2020/05/19 12:00 a.m.•50 views

CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers’ installations in web.config, and can be used to send serialized ASP code. Recent assessments: wvu-r7 at May 21, 2020 5:50am UTC reported: Metasplo...

9.8CVSS6.5AI score0.77635EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/19 12:00 a.m.•10 views

CVE-2020-13166: Use of Hard-coded Credentials

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...

9.8CVSS8.8AI score0.77635EPSS
SaveExploits5References2
Rows per page
Query Builder