Skip to content
Noroxi

masterlab records

6 published records for vendor masterlab.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2020-23534
    39Monitor

    A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    masterlab · masterlabFeb 25, 2021

  • CVE-2023-7145
    39Monitor

    gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    masterlab · masterlabDec 28, 2023

  • CVE-2023-7146
    39Monitor

    gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    masterlab · masterlabDec 28, 2023

  • CVE-2023-7159
    39Monitor

    gopeak MasterLab User.php update unrestricted upload

    CriticalCVSS 9.8No exploitEPSS 1%

    masterlab · masterlabDec 29, 2023

  • CVE-2023-7147
    39Monitor

    gopeak MasterLab User.php base64ImageContent unrestricted upload

    CriticalCVSS 9.8No exploitEPSS 1%

    masterlab · masterlabDec 28, 2023

  • CVE-2023-7144
    39Monitor

    gopeak MasterLab HTTP POST Request Feature.php sqlInject sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    masterlab · masterlabDec 28, 2023