CVE-2018-14831

概要

参考情報

• gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f · Exploit

damicms のその他の脆弱性

• CVE-2020-21236高 8.8A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts …
• CVE-2020-18458高 8.0Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
• CVE-2020-18451中 4.8Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
• CVE-2018-20571高 7.5DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T…
• CVE-2018-16331高 8.8admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.