CVE-2020-20295

概要

参考情報

• arterli/CmsWing · Exploit

cmswing のその他の脆弱性

• CVE-2021-43736緊急 9.8CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule
• CVE-2021-43735緊急 9.8CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.
• CVE-2020-24993中 5.4There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the articl…
• CVE-2020-24992中 5.4There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses …
• CVE-2020-20296緊急 9.8An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious par…