CVE-2020-23975

概要

参考情報

• cxsecurity.com/issue/WLB-2020030174 · Exploit
• packetstormsecurity.com/files/156948/Webexcels-Ecommerce-CMS-2.x-SQL-Injection-Cross-Site-Scripting.html · Exploit

ecommerce cms のその他の脆弱性

• CVE-2020-23976緊急 9.8Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter.