CVE-2020-23631

概要

参考情報

• shadoweb/wdja · Exploit
• cnblogs.com/wayne-tao/p/13110663.html · Exploit

wdja cms のその他の脆弱性

• CVE-2020-20982緊急 9.6Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, …
• CVE-2020-21658中 6.5A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.
• CVE-2020-21648緊急 9.1WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.