CVE-2018-15844

概要

参考情報

• Vict00r/poc · Third Party Advisory
• exploit-db.com/exploits/45314 · Third Party Advisory

damicms のその他の脆弱性

• CVE-2020-21236高 8.8A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts …
• CVE-2020-18458高 8.0Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
• CVE-2020-18451中 4.8Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
• CVE-2018-14831中 4.9An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a craf…
• CVE-2018-20571高 7.5DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T…