Approved changes feed: RSS · Atom

cpe:2.3:a:4mosan:gcb_doctor:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor4Mosan (dba8a220-24e7-5c5d-b316-f2f211bdff3c)
ProductGcb Doctor (303ed684-799c-5e7b-8cf0-a83d7d74bf32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-44159 vulnerable 2026-06-08 05:36:45.039302 4MOSAn GCB Doctor - Unrestricted Upload of File
CRITICAL (9.8)
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.
Published: 2021-12-20T03:10:19.975Z
Updated: 2024-09-17T00:11:07.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42338 vulnerable 2026-06-08 05:35:22.172922 4MOSAn GCB Doctor - Improper Authorization
CRITICAL (9.8)
4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.
Published: 2021-11-19T09:05:12.132Z
Updated: 2024-09-17T00:21:46.974Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.