Skip to content
OpenAdvisories

Vendor

MESbook

4 known vulnerabilities.

Products

MESbook 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-6425

    Incorrect Provision of Specified Functionality vulnerability in MESbook

    Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMU…

    MESbook MESbook
  • Critical 9.3
    CVE-2024-6424

    Server-Side Request Forgery vulnerability in MESbook

    External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST" or "/api/Proxy/Get?userName=&password=…

    MESbook MESbook