CVE-2019-16123

概要

参考情報

• exploit-db.com/exploits/47315 · Exploit
• zerodays.lol · Third Party Advisory

piluscart のその他の脆弱性

• CVE-2019-25672高 8.2PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL…
• CVE-2019-9769高 8.8PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.