CVE-2020-23835

概要

参考情報

• boku7/tailorMS-rXSS-Keylogger · Exploit
• exploit-db.com/exploits/48813 · Third Party Advisory

tailor management system のその他の脆弱性

• CVE-2020-36077高 8.8SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer paramet…
• CVE-2020-36074高 8.8SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter.
• CVE-2020-36073高 8.8SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail paramete…
• CVE-2020-36072高 8.8SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.
• CVE-2020-36071高 8.8SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the c…