ForkCMS Directory Traversal vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-1207 · ADVISORY
• forkcms/forkcms commit a9986b8 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/73169 · WEB
• forkcms/forkcms · PACKAGE
• web.archive.org/web/20120401204340/http://www.securityfocus.com/bid/51972 · WEB
• packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html · WEB
• fork-cms.com/blog/detail/fork-cms-3-2-5-released · WEB
• securityfocus.com/bid/51972 · Exploit

forkcms/forkcms のその他の脆弱性

• CVE-2022-35590中 4.8A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
• CVE-2022-35589中 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Paramete…
• CVE-2022-35587中 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Paramete…
• CVE-2022-35585中 4.8A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Par…
• CVE-2022-1064高 8.8SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.