CVE-2018-8766

概要

参考情報

• joyplus/joyplus-cms · Exploit

joyplus-cms のその他の脆弱性

• CVE-2020-20636高 7.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of th…
• CVE-2020-22124高 7.5A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
• CVE-2019-17175高 7.5joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
• CVE-2018-14500中 6.1joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
• CVE-2018-14389緊急 9.8joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.