CVE-2020-20945

概要

参考情報

• qibosoft.com/downloadProduction.htm · Vendor Advisory
• blog.csdn.net/he_and/article/details/102698171 · Exploit

qibosoft のその他の脆弱性

• CVE-2020-20808中 6.1Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd a…
• CVE-2020-20946中 5.4Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
• CVE-2020-20944緊急 9.1An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.
• CVE-2020-20943中 4.3A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arb…
• CVE-2021-27811高 7.2A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP cod…