← Back

Mylittletools

mylittletools

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Mylittleadmin
mylittleadmin
2 CVEs
Mylittlebackup
mylittlebackup
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-39392
1Mylittletools
1Mylittlebackup
Jun 17, 2026
Sep 15, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used t...Show more
The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.Show less
CVE-2020-13166
1Mylittletools
1Mylittleadmin
Jun 17, 2026
May 19, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP...Show more
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.Show less
CVE-2012-4015
1Mylittletools
1Mylittleadmin
Apr 29, 2026
Sep 25, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted datab...Show more
Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry.Show less