MK
Vendor
Mk-auth
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-27246 | MK Mk-auth Mk-auth | 8.8 | Mar 28 | An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file |
| CVE-2021-21495 | MK Mk-auth Mk-auth | 8.8 | Jan 4 | MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI |
| CVE-2021-21494 | MK Mk-auth Mk-auth | 4.8 | Jan 4 | MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter |
| CVE-2021-3005 | MK Mk-auth Mk-auth | 4.3 | Jan 3 | MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php… |
| CVE-2020-14072 | MK Mk-auth Mk-auth | 9.8 | Jun 29 | An issue was discovered in MK-AUTH 19.01 |
| CVE-2020-14071 | MK Mk-auth Mk-auth | 6.1 | Jun 29 | An issue was discovered in MK-AUTH 19.01 |
| CVE-2020-14070 | MK Mk-auth Mk-auth | 9.8 | Jun 29 | An issue was discovered in MK-AUTH 19.01 |
| CVE-2020-14069 | MK Mk-auth Mk-auth | 6.8 | Jun 29 | An issue was discovered in MK-AUTH 19.01 |
| CVE-2020-14068 | MK Mk-auth Mk-auth | 9.8 | Jun 29 | An issue was discovered in MK-AUTH 19.01 |