CVE-2020-18454

概要

参考情報

• hillerlin/bycms · Exploit

bycms のその他の脆弱性

• CVE-2020-18457中 6.8Cross Site Request Forgery (CSRF) vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html.
• CVE-2020-18455中 4.8Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php.