Showing topic results for "CVE-2020-13166":

(1 of 1)

Sort by:
Attacker Value
Moderate

CVE-2020-13166

Disclosure Date: May 19, 2020 (last updated June 02, 2020)
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.
Attack Vector: Network
0