CVE-2020-23572

概要

参考情報

• source-trace/beescms · Exploit

beescms のその他の脆弱性

• CVE-2024-31011緊急 9.8Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolate…
• CVE-2020-22334中 6.5Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /a…
• CVE-2019-8347高 8.8BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=us…
• CVE-2018-12739高 8.8In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.
• CVE-2018-10266高 8.8BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.