CVE-2019-15751

概要

参考情報

• contextis.com/en/resources/advisories/cve-2019-15751 · Third Party Advisory

sitos six のその他の脆弱性

• CVE-2019-15750中 6.1A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web sc…
• CVE-2019-15749中 6.5SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with t…
• CVE-2019-15748緊急 9.8SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unaut…
• CVE-2019-15747高 8.8SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role …
• CVE-2019-15746緊急 9.8SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and e…