CVE-2020-19159

概要

参考情報

• TL-swallow/swallow · Exploit

laiketui のその他の脆弱性

• CVE-2021-40956高 7.5LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
• CVE-2021-40955高 7.2SQL injection exists in LaiKetui v3.5.0 the background administrator list.
• CVE-2021-40954緊急 9.8Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
• CVE-2021-34129高 8.1LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall t…
• CVE-2021-34128高 8.8LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP a…