CVE-2020-15921

概要

参考情報

• packetstormsecurity.com/files/159239/Mida-eFramework-2.9.0-Backdoor-Access.html · Exploit
• elbae.github.io/jekyll/update/2020/07/14/vulns-01.html · Exploit

eframework のその他の脆弱性

• CVE-2020-15924高 7.5There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection…
• CVE-2020-15923高 7.5Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.
• CVE-2020-15922緊急 9.8There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative…
• CVE-2020-15920緊急 9.8There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with admini…
• CVE-2020-15919中 6.1A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.