CVE-2014-9242

概要

参考情報

• packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html · Exploit
• seclists.org/fulldisclosure/2014/Nov/44 · Exploit

websitebaker のその他の脆弱性

• CVE-2021-47788高 8.8WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to exe…
• CVE-2023-53953中 5.4WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when cr…
• CVE-2023-53903中 5.4WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with …
• CVE-2023-53902中 6.5WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulati…
• CVE-2020-25990緊急 9.8WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue cou…