CVE-2020-19914

概要

参考情報

• kevinoclam.github.io/blog/2019/07/31/xiunobbs-upload · Exploit

xiunobbs のその他の脆弱性

• CVE-2020-21496中 6.1A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar…
• CVE-2020-21495中 6.1A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar…
• CVE-2020-21494中 6.1A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web…
• CVE-2020-21493中 5.3An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.
• CVE-2019-19998高 7.5Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.