CVE-2019-20060

概要

参考情報

• medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad
• mfscripts.com · Product
• yetishare.com · Product

yetishare のその他の脆弱性

• CVE-2019-20062緊急 9.8MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash (the hash never expires until u…
• CVE-2019-20061高 7.5The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in clea…
• CVE-2019-20059高 8.8payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 …
• CVE-2019-19806中 5.3_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is confi…
• CVE-2019-19805中 5.3_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different amount of time to return depending on whether…