CVE-2018-19135

概要

参考情報

• ClipperCMS/ClipperCMS · Exploit
• exploit-db.com/exploits/45839 · Exploit

clippercms のその他の脆弱性

• CVE-2022-41497緊急 9.8ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php.
• CVE-2022-41495緊急 9.8ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php.
• CVE-2018-12101中 5.4CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields.
• CVE-2018-19424高 7.2ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.
• CVE-2018-13998中 4.8ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.