CVE-2020-15922

概要

参考情報

• packetstormsecurity.com/files/159314/Mida-eFramework-2.8.9-Remote-Code-Execution.html · Exploit
• elbae.github.io/jekyll/update/2020/07/14/vulns-01.html · Exploit

eframework のその他の脆弱性

• CVE-2020-15924高 7.5There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection…
• CVE-2020-15923高 7.5Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.
• CVE-2020-15921緊急 9.8Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities,…
• CVE-2020-15920緊急 9.8There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with admini…
• CVE-2020-15919中 6.1A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.