CVE-2019-18664

概要

参考情報

• atomic111.github.io/article/secudos-domos-reflected-xss · Exploit
• secudos.de/news-und-events/aktuelle-news/domos-release-5-6 · Release Notes

domos のその他の脆弱性

• CVE-2020-14293高 7.5conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field …
• CVE-2019-18665高 7.5The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.