Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-16704 · ADVISORY
• gleez/cms · WEB
• gleez/cms · PACKAGE

gleez/cms のその他の脆弱性

• CVE-2021-27312緊急 9.4Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive …
• CVE-2018-16347中 6.1An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize.
• CVE-2018-15845高 8.8There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.
• CVE-2018-1999021中 5.4Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web…
• CVE-2018-7035中 5.4Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML conte…