Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mk Auth HIGH 8.8
CVE-2023-27246

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .h…

Fix: after 23.01k4.9
Fix from $1,950 2023-03-28
Mk Auth HIGH 8.8
CVE-2021-21495

MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.

Fix: after 19.01
Fix from $1,950 2021-01-04
Mk Auth CRITICAL 9.8
CVE-2020-14068

An issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to bypass authentication and gain client privileges via SQL …

Mitigation only
Fix from $2,300 2020-06-29
Mk Auth CRITICAL 9.8
CVE-2020-14070

An issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login functionality because guessable credentials to admin/execut…

Mitigation only
Fix from $2,300 2020-06-29
Mk Auth CRITICAL 9.8
CVE-2020-14072

An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts.

Mitigation only
Fix from $2,300 2020-06-29
Mk Auth MEDIUM 6.8
CVE-2020-14069

An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.p…

Mitigation only
Fix from $1,600 2020-06-29
Mk Auth MEDIUM 6.1
CVE-2020-14071

An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code.

Mitigation only
Fix from $1,600 2020-06-29