Vulnerabilities > MYQ Solution

DATE CVE VULNERABILITY TITLE RISK
2024-01-23 CVE-2024-22076 Unspecified vulnerability in Myq-Solution Print Server 8.2
MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.
network
low complexity
myq-solution
critical
9.8
2023-04-26 CVE-2023-27107 Incorrect Authorization vulnerability in Myq-Solution Central Server and Print Server
Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL.
network
low complexity
myq-solution CWE-863
8.8
2021-06-21 CVE-2021-31769 OS Command Injection vulnerability in Myq-Solution MYQ Server
MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory.
network
low complexity
myq-solution CWE-78
8.8