CVE-2020-20944

Description

References

• qibosoft.com/downloadProduction.htm · Vendor Advisory
• blog.csdn.net/he_and/article/details/102698171 · Exploit
• cwe.mitre.org/data/definitions/23.html · Third Party Advisory

Altre vulnerabilità di qibosoft

• CVE-2020-20808MEDIO 6.1Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd a…
• CVE-2020-20946MEDIO 5.4Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
• CVE-2020-20945ALTO 8.8A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add admi…
• CVE-2020-20943MEDIO 4.3A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arb…
• CVE-2021-27811ALTO 7.2A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP cod…