CVE-2020-20943

概要

参考情報

• blog.csdn.net/he_and/article/details/102698171 · Exploit

qibosoft のその他の脆弱性

• CVE-2020-20808中 6.1Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd a…
• CVE-2020-20946中 5.4Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
• CVE-2020-20945高 8.8A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add admi…
• CVE-2020-20944緊急 9.1An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.
• CVE-2021-27811高 7.2A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP cod…