CVE-2020-22120

概要

参考情報

• cwe.mitre.org/data/definitions/96.html · Third Party Advisory
• peacexie/imcat · Exploit

imcat のその他の脆弱性

• CVE-2021-35370緊急 9.8An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.
• CVE-2021-35369中 6.5Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filt…
• CVE-2021-36444高 8.8Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token g…
• CVE-2021-36443高 8.8Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.
• CVE-2020-20392緊急 9.8SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.