EDB-50191
PoCAltova MobileTogether Server 7.3 - XML External Entity Injection (XXE)
view exploit source exploit_dbtype webappsauthor RedTeam Pentesting GmbHpublished 2021-08-12catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37425US | critical9.1 | Exploit | ||
Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then r… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan