Skip to content
OpenAdvisories

Vendor

Pimpmylog

1 known vulnerabilities.

Products

PimpMyLog 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-53895

    PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint

    PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScr…

    Pimpmylog PimpMyLog