Smartfoxserver - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2021-02-09.

Products

• Smartfoxserver - 3 CVEs

Newest CVEs of Smartfoxserver

• CVE-2021-26551 - CVSS 8.8 (high), 2021-02-09: An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating…
• CVE-2021-26550 - CVSS 5.5 (medium), 2021-02-09: An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.
• CVE-2021-26549 - CVSS 5.4 (medium), 2021-02-09: An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This…