CVE-2018-17048

概要

参考情報

• cnvd.org.cn/flaw/show/CNVD-2018-19263 · Third Party Advisory
• fangfacms.com · Product
• badongdyc/fangfacms · Patch

fdcms のその他の脆弱性

• CVE-2020-35442緊急 9.8FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/…
• CVE-2020-35441緊急 9.8FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.