CVE-2021-39402
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Maian Script World Maian Affiliate是英国Maian Script World公司的一个用 PHP 编写的免费、简单但功能强大的php 推荐系统系统。 MaianAffiliate存在代码注入漏洞，该漏洞源于注入的有效负载反映在附属网站主页上，用于所有经过身份验证和未经身份验证的访问者。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-39402
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Maian Script World Maian Affiliate 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Maian Script World Maian Affiliate是英国Maian Script World公司的一个用 PHP 编写的免费、简单但功能强大的php 推荐系统系统。 MaianAffiliate存在代码注入漏洞，该漏洞源于注入的有效负载反映在附属网站主页上，用于所有经过身份验证和未经身份验证的访问者。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2021-39402
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-39402
请登录查看更多情报信息。
Other References for CVE-2021-39402 (2)
-
https://www.maianscriptworld.co.uk/ x_refsource_MISC
-
https://github.com/mari0x00/MaianAffiliate-Code-execution-and-XSS x_refsource_MISC
Same Patch Batch · n/a · 2021-09-20 · 112 CVEs total
| CVE-2021-39548 | Sela 代码问题漏洞 | |
| CVE-2021-39553 | Swftools 代码问题漏洞 | |
| CVE-2021-39559 | Swftools 代码问题漏洞 | |
| CVE-2021-39597 | Swftools 代码问题漏洞 | |
| CVE-2021-39562 | Swftools 代码问题漏洞 | |
| CVE-2021-39561 | Swftools 缓冲区错误漏洞 | |
| CVE-2021-39557 | Swftools 代码问题漏洞 | |
| CVE-2021-39596 | Swftools 代码问题漏洞 | |
| CVE-2021-39575 | swftools 代码问题漏洞 | |
| CVE-2021-39547 | Sela 代码问题漏洞 | |
| CVE-2021-39546 | Sela 缓冲区错误漏洞 | |
| CVE-2021-39598 | Swftools 代码问题漏洞 | |
| CVE-2021-39544 | Sela 缓冲区错误漏洞 | |
| CVE-2021-39552 | Sela 缓冲区错误漏洞 | |
| CVE-2021-32299 | pbrt 缓冲区错误漏洞 | |
| CVE-2021-39541 | Pdftools 代码问题漏洞 | |
| CVE-2021-39540 | Pdftools 缓冲区错误漏洞 | |
| CVE-2021-39536 | Libxsmm 缓冲区错误漏洞 | |
| CVE-2021-39542 | Pdftools 代码问题漏洞 | |
| CVE-2021-39533 | libslax 缓冲区错误漏洞 |
Showing top 20 of 112 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-39402
No comments yet