[0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-26 15:28 UTC
  • Importiert: 2026-08-26 15:51 UTC
  • Quelle-ID: full_disc
  • uid_hash: 6504b2911bf4d5865f34f95d773e6709849ee5fb0c40df51f927ef28ee8eca74
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in myDBR 7.5.4 (build 5454) (other versions with the

same file-editor are likely affected).

Type: Authenticated RCE (admin file editor + default credentials) (CWE-94)

CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Impact: Authenticated remote code execution on the reporting server as www-data, exposing business reports and the

database connection.

Authentication:...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste