CVE-2020-15028

概要

参考情報

• gist.github.com/p4nk4jv/68ae8b773dbea6d8769295ba96d9f1e3 · Third Party Advisory
• nedi.ch/download · Product

nedi のその他の脆弱性

• CVE-2022-40895緊急 9.1In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to a…
• CVE-2021-26753緊急 9.9NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP PO…
• CVE-2021-26752高 8.8NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php…
• CVE-2021-26751高 8.8NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php…
• CVE-2020-23989中 5.4NeDi 1.9C allows pwsec.php oid XSS.