CVE-2023-22855

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.

• CWE-94
• CWE-94

• http://packetstormsecurity.com/files/171046/Kardex-Mlog-MCC-5.7.12-0-a203c2a213-master-File-Inclusion-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/171689/Kardex-Mlog-MCC-5.7.12-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2023/Feb/10Exploit, Mailing List, Third Party Advisory
• https://github.com/patrickhener/CVE-2023-22855/blob/main/advisory/advisory.mdExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/51239
• http://packetstormsecurity.com/files/171046/Kardex-Mlog-MCC-5.7.12-0-a203c2a213-master-File-Inclusion-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/171689/Kardex-Mlog-MCC-5.7.12-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2023/Feb/10Exploit, Mailing List, Third Party Advisory
• https://github.com/patrickhener/CVE-2023-22855/blob/main/advisory/advisory.mdExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/51239

Published

Feb 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2285The WP Activity Log Premium plugin for WordPress is vulnerab…4.3
• CVE-2023-22850Tiki before 24.1, when the Spreadsheets feature is enabled, …8.8
• CVE-2023-22851Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordp…7.2
• CVE-2023-22852Tiki through 25.0 allows CSRF attacks that are related to ti…6.5
• CVE-2023-22853Tiki before 24.1, when feature_create_webhelp is enabled, al…8.8
• CVE-2023-22854The ccmweb component of Mitel MiContact Center Business serv…7.5
• CVE-2023-22856A stored Cross-site Scripting (XSS) vulnerability in BlogEng…5.4
• CVE-2023-22857A stored Cross-site Scripting (XSS) vulnerability in BlogEng…5.4
• CVE-2023-22858An Improper Access Control vulnerability in BlogEngine.NET 3…5.3
• CVE-2023-2286The WP Activity Log for WordPress is vulnerable to Cross-Sit…4.3
• CVE-2023-22860IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2…5.4
• CVE-2023-22862IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmit…7.5