CVE-2020-20977

概要

参考情報

• yxcmf/ukcms · Exploit

ukcms のその他の脆弱性

• CVE-2020-18449中 5.4Cross Site Scripting (XSS) vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php
• CVE-2019-10888高 8.8A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.
• CVE-2018-14911高 7.2A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file uploa…