CVE-2014-5258

概要

参考情報

• packetstormsecurity.com/files/128301/webEdition-6.3.8.0-Path-Traversal.html · Exploit
• securityfocus.com/archive/1/533465/100/0/threaded
• webedition.org/de/aktuelles/webedition-cms/webEdition-6.3.9-Beta-erschienen · Vendor Advisory
• webedition.org/de/webedition-cms/versionshistorie/webedition-6/version-6.3.9.0 · Vendor Advisory
• htbridge.com/advisory/HTB23227 · Exploit

webedition cms のその他の脆弱性

• CVE-2023-53884中 5.4Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files w…
• CVE-2023-53883高 7.2Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject system commands through…
• CVE-2024-28418中 6.5Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php
• CVE-2024-28417中 6.3Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.
• CVE-2014-2302緊急 9.8The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection att…