Klogserver - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2021-01-26.

Products

• Klog Server - 2 CVEs

Newest CVEs of Klogserver

• CVE-2021-3317 - CVSS 8.8 (high), 2021-01-26: KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.
• CVE-2020-35729 - CVSS 9.8 (critical), 2020-12-27: KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.