2 results (0.010 seconds)

CVSS: 9.8EPSS: 6%CPEs: 1EXPL: 1

21 Jun 2022 — iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal. iSpy versión v7.2.2.0 es vulnerable a la ejecución remota de comandos mediante path traversal • https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0

21 Jun 2022 — iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL. iSpyConnect iSpy versión v7.2.2.0, permite a atacantes omitir la autenticación por medio de una URL diseñada • https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b • CWE-287: Improper Authentication •