Myq Server
Approved changes feed: RSS · Atom
cpe:2.3:a:myq-solution:myq_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Myq Solution (4b790ef9-b68e-5436-af87-376df0d2eee7) |
|---|---|
| Product | Myq Server (00d9fe82-f388-5ec8-aa17-250af3c23189) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-31769 |
vulnerable | 2026-06-08 05:31:53.880023 |
Details available
MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as commands to create new .php files) via the Task Scheduler component.
Published: 2021-06-21T10:59:02.000Z
Updated: 2024-08-03T23:03:33.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.