CVE-2020-22225

概要

参考情報

• pastebin.com/cZFwMb5F · Exploit

fundraising script のその他の脆弱性

• CVE-2023-40762緊急 9.8User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages …
• CVE-2023-40751中 6.1PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.
• CVE-2020-22226緊急 9.8Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.
• CVE-2020-22224中 6.1Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview …
• CVE-2020-22223緊急 9.8Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.