CVE-2020-29280

Description

References

• BigTiger2020/Victor-CMS- · Third Party Advisory
• VictorAlagwu/CMSsite · Third Party Advisory
• exploit-db.com/exploits/48734 · Third Party Advisory

Weitere Schwachstellen in victor cms

• CVE-2020-37076HOCH 8.2Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate…
• CVE-2020-37073HOCH 8.8Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content thr…
• CVE-2020-37072MITTEL 6.1Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject m…
• CVE-2020-36942HOCH 8.8Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image …
• CVE-2020-23966KRITISCH 9.8SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafte…