CVE-2018-20469

概要

参考情報

• packetstormsecurity.com/files/153331/Sahi-Pro-8.x-SQL-Injection.html · Exploit
• barriersec.com/2019/06/cve-2018-20469-sahi-pro · Exploit

sahi pro のその他の脆弱性

• CVE-2019-13066中 6.1Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, b…
• CVE-2019-13063高 7.5Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on th…
• CVE-2019-15102緊急 9.8An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) does not have any authen…
• CVE-2019-13597緊急 9.8_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Als…
• CVE-2018-20472中 5.4An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.