CVE-2020-23962

概要

参考情報

• xwlrbh/Catfish · Exploit

catfish cms のその他の脆弱性

• CVE-2021-45018中 6.1Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.html…
• CVE-2021-45017高 8.8Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that us…
• CVE-2018-18734高 8.8A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.
• CVE-2018-18733中 5.4An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999.
• CVE-2018-13999中 4.8Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).