Lucene search
KlogserverKlog Server
2 matches found
CVE-2020-35729
KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.
10CVSS9.6AI score0.92643EPSS
CVE-2021-3317
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.
8.8CVSS8.9AI score0.21203EPSS