CVE-2023-27107
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MyQ Solution Print Server和MyQ Solution Central Server都是MyQ Solution公司的产品。MyQ Solution Print Server是一款易于使用的打印管理软件。可以控制打印机，降低打印成本，并通过减少不必要的浪费来实现环保。MyQ Solution Central Server是一种通用的打印解决方案。提供与打印、复制和扫描相关的各种服务。 MyQ Solution Print Server 8.2 Patch 32 之前版本、Centra
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud Storage
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-27107
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
MyQ Solution Print Server和MyQ Solution Central Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MyQ Solution Print Server和MyQ Solution Central Server都是MyQ Solution公司的产品。MyQ Solution Print Server是一款易于使用的打印管理软件。可以控制打印机，降低打印成本，并通过减少不必要的浪费来实现环保。MyQ Solution Central Server是一种通用的打印解决方案。提供与打印、复制和扫描相关的各种服务。 MyQ Solution Print Server 8.2 Patch 32 之前版本、Centra
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2023-27107
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-27107
请登录查看更多情报信息。
Other References for CVE-2023-27107 (1)
Same Patch Batch · n/a · 2023-04-26 · 26 CVEs total
| CVE-2023-2294 | 3.5 LOW | UCMS Column Configuration saddpost.php cross site scripting |
| CVE-2023-30212 | OURPHP 跨站脚本漏洞 | |
| CVE-2023-24796 | Vinga WR-AC1200 安全漏洞 | |
| CVE-2022-39989 | Fighting Cock Information System 信任管理问题漏洞 | |
| CVE-2023-30112 | Medicine Tracker System SQL注入漏洞 | |
| CVE-2023-30265 | CLTPHP 路径遍历漏洞 | |
| CVE-2023-30266 | CLTPHP 代码问题漏洞 | |
| CVE-2023-30267 | CLTPHP 跨站脚本漏洞 | |
| CVE-2023-30269 | CLTPHP 输入验证错误漏洞 | |
| CVE-2022-27978 | ToolJet 安全漏洞 | |
| CVE-2022-27979 | ToolJet 跨站脚本漏洞 | |
| CVE-2023-30210 | OURPHP 跨站脚本漏洞 | |
| CVE-2023-30211 | OURPHP SQL注入漏洞 | |
| CVE-2023-30363 | Tencent vConsole 安全漏洞 | |
| CVE-2022-44232 | libming 安全漏洞 | |
| CVE-2023-26930 | Glyph & Cog XpdfReader 安全漏洞 | |
| CVE-2020-36070 | Voyager 安全漏洞 | |
| CVE-2023-26567 | FreePBX 安全漏洞 | |
| CVE-2023-29596 | Cmix 安全漏洞 | |
| CVE-2023-29835 | Wondershare Dr.Fone 安全漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2023-27107
No comments yet