CVE-2018-11004

概要

参考情報

• TekerFue/SDcms-Code-Audit · Exploit

sdcms のその他の脆弱性

• CVE-2019-9652高 8.8There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filename in the file parame…
• CVE-2019-9651緊急 9.8An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function's filtering is not st…
• CVE-2018-19748高 7.5app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&r…
• CVE-2018-19520高 8.8An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block…