Vulnerabilities (CVE)

Filtered by vendor Mylittletools Subscribe
Filtered by product Mylittleadmin
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13166 1 Mylittletools 1 Mylittleadmin 2022-04-26 7.5 HIGH 9.8 CRITICAL
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.