Vulners
Lucene search
3 matches found
CVE-2021-26551
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...
8.8CVSS7.4AI score0.00175EPSS
Exploits3References1
CVE-2021-26550
An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml...
5.5CVSS6.9AI score0.00091EPSS
Exploits3References1
CVE-2021-26551
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...
9.1AI score0.00175EPSS
Exploits3References3
20