high8.8
CVE-2021-26551
An issue was discovered in SmartFoxServer 2.17.0.
Impact
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartfoxserver | Smartfoxserver | Version 2.17.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html
- https://www.smartfoxserver.com
- https://www.zeroscience.mk/en/vulnerabilities/
- http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html
- https://www.smartfoxserver.com
- https://www.zeroscience.mk/en/vulnerabilities/