CVE-2019-25693

概要

参考情報

• exploit-db.com/exploits/46274 · Exploit
• resourcespace.com · Product
• resourcespace.com/get · Product
• vulncheck.com/advisories/resourcespace-sql-injection-via-collection-edit-php · Third Party Advisory

resourcespace のその他の脆弱性

• CVE-2019-25662高 7.5ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injectin…
• CVE-2022-31260中 6.5In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non…
• CVE-2021-41951中 6.1ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php vi…
• CVE-2021-41950緊急 9.1A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on t…
• CVE-2021-41765緊急 9.8A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated att…