CVE-2020-22841

Description

References

• packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html · Exploit
• b2evolution/b2evolution · Third Party Advisory
• exploit-db.com/exploits/49551 · Exploit

Autres vulnérabilités de b2evolution

• CVE-2022-30935CRITIQUE 9.1An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the us…
• CVE-2021-28242ÉLEVÉE 8.8SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by…
• CVE-2020-22840MOYENNE 6.1Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker…
• CVE-2016-8901CRITIQUE 9.8b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.
• CVE-2017-1000423CRITIQUE 9.8b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resu…