Shodan

123.31.41.38

Regular View Raw Data
Last Seen: 2024-05-07

GeneralInformation

Hostnames 3donlinejsc.com
static.vnpt.vn
Domains 3donlinejsc.com vnpt.vn 
Country Viet Nam
City Hanoi
Organization Vietnam Posts and Telecommunications Group
ISP VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
ASN AS135905

WebTechnologies

Database managers
phpMyAdmin5.0.2
Databases
MySQL
JavaScript libraries
jQuery
jQuery UI
jQuery Migrate
Programming languages
PHP
UI frameworks
Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-25727 In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
CVE-2022-0813 5.0PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-26935 7.5An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query.
CVE-2020-26934 4.3phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.
CVE-2020-22452 SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
CVE-2020-22278 6.8phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.
CVE-2020-11441 4.3phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.
CVE-2019-20372 4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts 

-371650500 | 2024-05-07T00:22:55.085487
21 / tcp 
1044627129 | 2024-05-05T21:49:49.476524
22 / tcp 
98551956 | 2024-05-07T04:54:19.083686
80 / tcp 
125761684 | 2024-05-03T07:44:46.092955
82 / tcp 
-554746519 | 2024-05-02T13:45:09.962155
443 / tcp 
-99433405 | 2024-04-22T19:56:47.988949
3306 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved