Vulnerabilities

TI-2023-26246 CVE-2023-48390 · GHSA-775f-36w2-wxm2

Multisuns EasyLog web+ - Command Injection

MEDIUM 44

Multisuns EasyLog web+ has a code injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01115 Published 2023-12-15 No fix listed CWE-94

TI-2023-26245 CVE-2023-48389 · GHSA-j3w9-v397-f6wg

MEDIUM 42

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22

TI-2023-26244 CVE-2023-48388 · GHSA-76w9-q3mj-jv6h

MEDIUM 45

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00926 Published 2023-12-15 No fix listed CWE-798