CVEs-PoC/2021/CVE-2021-26550.md

CVE-2021-26550

Description

An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.

POC

Reference

• http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html
• https://www.zeroscience.mk/en/vulnerabilities/
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php

Github

No PoCs found on GitHub currently.