CVE-2020-22124

概要

参考情報

• 876054426/vul · Exploit

joyplus-cms のその他の脆弱性

• CVE-2020-20636高 7.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of th…
• CVE-2019-17175高 7.5joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
• CVE-2018-14500中 6.1joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
• CVE-2018-14389緊急 9.8joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
• CVE-2018-14388中 5.4joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.