← All advisories

Critical severity9.8NVD Advisory· Published Dec 27, 2020· Updated Jun 17, 2026

CVE-2020-35729

CVE-2020-35729

Description

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Klogserver/Klog Servercpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- (no CPE)range: =2.4.1
- cpe:2.3:a:klogserver:klog_server:2.4.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

packetstormsecurity.com/files/160798/Klog-Server-2.4.1-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/161123/Klog-Server-2.4.1-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/161410/Klog-Server-2.4.1-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/mustgundogdu/Research/blob/main/KLOG_SERVER/Exploit_CodenvdExploitThird Party Advisory
github.com/mustgundogdu/Research/blob/main/KLOG_SERVER/README.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.